If there’s any one gripe most users have with their monitoring toolset, it’s got to be a lack of effective event suppression. Virtually every organization I visit struggles with notification fatigue. The modern datacenter has a lot going on, and a lot of potential signs of failure occurring; high CPU utilization, services not responding to requests on occasion, drives filling up. One switch goes down and Administrators suddenly get hundreds of notifications. Most of this can be ignored, but how do we suppress effectively?