Consolidation / Composition Tutorial
Another old favorite topic I get asked about quite a lot.
This tutorial covers two concepts and ties them together into an end to end monitoring scenario. First I introduce the consolidation module type and build a rule that does not use the module and an rule that does use it. If you have never considered using consolidation this shows you how it works and why it is very useful to reduce your alert noise, After this I extend this scenario and compose a new module type out of the standard module type to expose a different set of configuration and allow changes to override behavior.