Reducing linkDown events

[ramesh9]

OBM 2020.11 and NNM 2020.08 integrated using OpsConnector.

We are receiving 5 linkDown traps in 5 minute interval in NNM and forwarding them to OBM using opctrapi policy, resulting in 1 event with 4 duplicates.

Is there any possibility using OA agent to suppress 4 traps and forward only 5th trap to OBM within 5 minute interval, so every 5 minutes only 1 alarm should be created in OBM.

We do not want to use OBM correlation methods, since it will put extra burden in OBM.

Please advise, really I miss ECS designer circuits provided in OM environment.

[Carol Park]

You could try this: Edit the trap policy. Select the rule that is responsible for the linkDown traps. In the Event Correlation tab, enable Event Suppression and specify:

Suppress events which are "identical relative to their attributes"
Suppression method "counter"
Counter threshold "5"

This should send an event for the 5th trap that matches the rule AND produces an event with the same message key, or if that's not set then the same values for 7 other event attributes (node, severity, title, application, object, category, service name).

CP.