New Ranks & Badges For The Community!
Notice something different? The ranks and associated badges have gone "Star Fleet". See what they all mean HERE
Highlighted
Absent Member.
Absent Member.
221 views

My interface state is rule not triggering?

I have setup two rules to update an active list. If the interface is up, it should update the list with UP. If it is down, it should update the list with Down. (I prevent it overwriting with a local variable; time comparison).

Sometimes the rules are not triggering and I have no idea why. Here is an example:

Events from the Interface:

Events.JPG

Active List vs. Last State Data monitor.    (The monitor is correctly showing down)

dashboard activelist discrepency.JPG

Interface UP rule. The Down rule mirrors this. (except for the Name = field).

Interface UP rule.JPG

The down rule does work. I don't know why the ArcSight skips over these events.

Any help is appreciated.

Labels (1)
0 Likes
Reply
0 Replies
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.