Fix suppression membership
Synthetic maintenance concerns service A only. Event E1 is an expected A restart; E2 is independent B failure; E3 is A post-maintenance failure after suppression ends. Global suppression hides all events during maintenance; scoped suppression hides only A events then. Events outside the window are shown by both rules.
| Event | Global rule | A-only rule |
|---|---|---|
| E1 A expected inside | Hidden | Hidden |
| E2 B fault inside | Hidden | Shown |
| E3 A fault after | Shown | Shown |
Run a separate-service fault
- Classify service and time
- Apply each suppression set
- Count real faults still shown
Do not expand maintenance scope after seeing a B failure merely to label it expected.
How many of the two real faults are shown by each rule?
Show the worked answer
Global shows one of two,50%; A-only shows both,100%. Both hide the expected E1 noise, but the global scope also hides E2.
Keep expected noise and missed faults apart
| Case | Decision | Reason |
|---|---|---|
| Global during A maintenance | MissesB fault | Scope too broad for supplied policy |
| A-only suppression | KeepsB fault visible | Matches service scope |
Keep E2 as a discriminating test whenever the suppression rule changes. This is a local coverage test, not a universal severity rule.