NNMi false Positive Events/Incidents - How to Avoid
We are running on NNMi version 2018.11 , We have few devices which keeps triggering Node UP/Down False positive Alerts as per the Network team , the devices are up but NNMi keeps triggering these Node Down Alerts .
Is there way we can make this alert/Incident in NNMi to be created for 2 consecutive Polling intervals . Only if it has Failed twice then the alert/incident should be triggered in the console . Like in Sitescope there is way to create an alert for 2 consecutive failures . Can we have do something like this to reduce the False Positives ?
Any other Suggestions to overcome this problem ?
Right, that should work. I personally like more the approach in finding out why the false Down generated, coz you cannot/should not lift that heavy job of monitoring many regions in network and adding them to the group which is assign to that Node settings with Rate correlation. On other hand, if you assign the Rate on everything, it may affect badly good nodes...
Looking at the rate thing may work -- but it will use some memory to hold on to events -- if your boxes have the juice, that's probably okay. We found that at least some of the devices on our networks that were giving us false positives had lots of old configurations on them -- old ACL's etc. -- are you using something like NA to manage configurations? You're not wrong to consider the device configurations.