diff --git a/operators/multiclusterobservability/manifests/base/alertmanager/alert_rules.yaml b/operators/multiclusterobservability/manifests/base/alertmanager/alert_rules.yaml index 59d04cb910..fe67d5c4c1 100644 --- a/operators/multiclusterobservability/manifests/base/alertmanager/alert_rules.yaml +++ b/operators/multiclusterobservability/manifests/base/alertmanager/alert_rules.yaml @@ -37,7 +37,7 @@ data: annotations: summary: "There is a policy report violation with a {{ $labels.severity }} severity level detected." description: "The policy: {{ $labels.policy }} has a severity of {{ $labels.severity }} on cluster: {{ $labels.cluster }}" - expr: sum without (managed_cluster_id) (label_replace((sum without (clusterID) (label_replace((sum(policyreport_info * on (managed_cluster_id) group_left (cluster) label_replace(acm_managed_cluster_labels, "cluster", "$1", "name", "(.*)")) by (cluster, category, clusterID, managed_cluster_id, policy, severity) > 0),"hub_cluster_id", "$1", "clusterID", "(.*)"))),"clusterID", "$1", "managed_cluster_id", "(.*)")) + expr: sum without (managed_cluster_id) (label_replace((sum without (clusterID) (label_replace((sum(policyreport_info * on (managed_cluster_id) group_left (cluster) max by (managed_cluster_id, cluster) (label_replace(acm_managed_cluster_labels, "cluster", "$1", "name", "(.*)"))) by (cluster, category, clusterID, managed_cluster_id, policy, severity) > 0),"hub_cluster_id", "$1", "clusterID", "(.*)"))),"clusterID", "$1", "managed_cluster_id", "(.*)")) for: 1m labels: severity: "{{ $labels.severity }}" diff --git a/operators/multiclusterobservability/manifests/base/grafana/platform-mcoa/prometheus-rule.yaml b/operators/multiclusterobservability/manifests/base/grafana/platform-mcoa/prometheus-rule.yaml index 8a58721735..75f05f2794 100644 --- a/operators/multiclusterobservability/manifests/base/grafana/platform-mcoa/prometheus-rule.yaml +++ b/operators/multiclusterobservability/manifests/base/grafana/platform-mcoa/prometheus-rule.yaml @@ -217,7 +217,7 @@ spec: annotations: summary: "There is a policy report violation with a {{ $labels.severity }} severity level detected." description: "The policy: {{ $labels.policy }} has a severity of {{ $labels.severity }} on cluster: {{ $labels.cluster }}" - expr: sum without (managed_cluster_id) (label_replace((sum without (clusterID) (label_replace((sum(policyreport_info * on (managed_cluster_id) group_left (cluster) label_replace(acm_managed_cluster_labels, "cluster", "$1", "name", "(.*)")) by (cluster, category, clusterID, managed_cluster_id, policy, severity) > 0),"hub_cluster_id", "$1", "clusterID", "(.*)"))),"clusterID", "$1", "managed_cluster_id", "(.*)")) + expr: sum without (managed_cluster_id) (label_replace((sum without (clusterID) (label_replace((sum(policyreport_info * on (managed_cluster_id) group_left (cluster) max by (managed_cluster_id, cluster) (label_replace(acm_managed_cluster_labels, "cluster", "$1", "name", "(.*)"))) by (cluster, category, clusterID, managed_cluster_id, policy, severity) > 0),"hub_cluster_id", "$1", "clusterID", "(.*)"))),"clusterID", "$1", "managed_cluster_id", "(.*)")) for: 1m labels: severity: "{{ $labels.severity }}"