Fleet Admiral
Fleet Admiral
49 views

Reducing linkDown events

OBM 2020.11 and NNM 2020.08 integrated using OpsConnector.

We are receiving 5 linkDown traps in 5 minute interval in NNM and forwarding them to OBM using opctrapi policy, resulting in 1 event with 4 duplicates.

Is there any possibility using OA agent to suppress 4 traps and forward only 5th trap to OBM within 5 minute interval, so every 5 minutes only 1 alarm should be created in OBM.

We do not want to use OBM correlation methods, since it will put extra burden in OBM.

Please advise, really I miss ECS designer circuits provided in OM environment.

Labels (1)
0 Likes
1 Reply
Micro Focus Expert
Micro Focus Expert

You could try this: Edit the trap policy. Select the rule that is responsible for the linkDown traps. In the Event Correlation tab, enable Event Suppression and specify:

Suppress events which are "identical relative to their attributes"
Suppression method "counter"
Counter threshold "5"

This should send an event for the 5th trap that matches the rule AND produces an event with the same message key, or if that's not set then the same values for 7 other event attributes (node, severity, title, application, object, category, service name).

 

CP.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.