Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Admiral
Admiral
449 views

NNMi false Positive Events/Incidents - How to Avoid

Hello Experts, 

We are running on NNMi version 2018.11 , We have few devices which keeps triggering Node UP/Down False positive Alerts as per the Network team , the devices are up but NNMi keeps triggering these Node Down Alerts .  

Is there way we can make this alert/Incident in NNMi to be created for 2 consecutive Polling intervals . Only if it has Failed twice then the alert/incident should be triggered in the console . Like in Sitescope there is way to create an alert for 2 consecutive failures . Can we have do something like this to reduce the False Positives ?

 

Any other Suggestions to overcome this problem ?

 

Regards

Bilal Aman

4 Replies
Micro Focus Expert
Micro Focus Expert

Hi Bilal, 

you want to have a look at the Rate feature of NNM. 

Details under https://docs.microfocus.com/itom/Network_Node_Manager_i:2020.08/RateSNMPTgIncident

Heinz

Sales Engineer
Micro Focus Expert
Micro Focus Expert

Hi Heinz,

Right, that should work. I personally like more the approach in finding out why the false Down generated, coz you cannot/should not lift that heavy job of monitoring many regions in network and adding them to the group which is assign to that Node settings with Rate correlation. On other hand, if you assign the Rate on everything, it may affect badly good nodes...

Captain
Captain

It may not necessarily indicate a false positive but more a symptom of an underlying issue. If it's the same nodes all the time it might be a network fault to those devices causing packet loss and showing as a node down in NNMi. Try correlating what NNMi see's against the problematic nodes with something more light weight and lower polling time (IP SLA, smokeping, etc)
Lieutenant Commander
Lieutenant Commander

Looking at the rate thing may work -- but it will use some memory to hold on to events -- if your boxes have the juice, that's probably okay.  We found that at least some of the devices on our networks that were giving us false positives had lots of old configurations on them -- old ACL's etc. -- are you using something like NA to manage configurations?  You're not wrong to consider the device configurations.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.