Enhance SQL templates to prevent duplicate notifications for 'Down Reconnected' devices in event section

This commit is contained in:
Jokob @NetAlertX
2026-03-18 09:57:20 +00:00
parent b311113575
commit d7c7bd2cd2
2 changed files with 25 additions and 5 deletions

View File

@@ -83,15 +83,22 @@ SQL_TEMPLATES = {
"down_reconnected": """
SELECT
devName,
eveMac,
reconnected_devices.eveMac,
devVendor,
eveIp,
eveDateTime,
eveEventType,
reconnected_devices.eveIp,
reconnected_devices.eveDateTime,
reconnected_devices.eveEventType,
devComments
FROM Events_Devices AS reconnected_devices
WHERE reconnected_devices.eveEventType = 'Down Reconnected'
AND reconnected_devices.evePendingAlertEmail = 1
AND NOT EXISTS (
SELECT 1 FROM Events AS newer
WHERE newer.eveMac = reconnected_devices.eveMac
AND newer.eveEventType = 'Down Reconnected'
AND newer.evePendingAlertEmail = 1
AND newer.eveDateTime > reconnected_devices.eveDateTime
)
ORDER BY reconnected_devices.eveDateTime
""",
"events": """
@@ -105,7 +112,7 @@ SQL_TEMPLATES = {
devComments
FROM Events_Devices
WHERE evePendingAlertEmail = 1
AND eveEventType IN ('Connected', 'Down Reconnected', 'Disconnected','IP Changed') {condition}
AND eveEventType IN ({event_types}) {condition}
ORDER BY eveDateTime
""",
"plugins": """