ScorpionSting Absent Member.
Absent Member.
969 views

Monitoring CE/CM

To monitor the CM, we have some Correlations that reactive to "no data" on the event sources and connector.

I'd like to do something similar for the CE, but there appears to be no event for the start/stop of the CE engine....there are some stats that come through, but I'd like to avoid a "window" correlation to check this.

Suggestions?

Visit my Website for links to Cool Solution articles.
0 Likes
3 Replies
brandon-langley Absent Member.
Absent Member.

Re: Monitoring CE/CM


ScorpionSting;267343 Wrote:
> To monitor the CM, we have some Correlations that reactive to "no data"
> on the event sources and connector.
>
> I'd like to do something similar for the CE, but there appears to be no
> event for the start/stop of the CE engine....there are some stats that
> come through, but I'd like to avoid a "window" correlation to check
> this.
>
> Suggestions?
>
>
> --
> -"Also now available in 'G+'
> (http://plus.google.com/+BenWalter-Kiwi) and 'Website'
> (https://www.isam.kiwi/) format".- 😉
> ------------------------------------------------------------------------
> ScorpionSting's Profile:
> https://forums.novell.com/member.php?userid=1663
> View this thread: https://forums.novell.com/showthread.php?t=498112


Have you looked at the correlation engine REST endpoints?


--
brandon.langley
------------------------------------------------------------------------
brandon.langley's Profile: https://forums.netiq.com/member.php?userid=350
View this thread: https://forums.netiq.com/showthread.php?t=55793

0 Likes
ScorpionSting Absent Member.
Absent Member.

Re: Monitoring CE/CM

That kind of monitoring would require involvement from other teams, which I'd like to avoid if possible.....

Visit my Website for links to Cool Solution articles.
0 Likes
jakubmichl Absent Member.
Absent Member.

Re: Monitoring CE/CM


Hi,

there are events for this. I have found internal events
-CorrelationEngineStarted- and -CorrelationEngineStopped- with
ObserverType A. Sentinel version 7.3.0.1.
But the problem is that without CE, you cannot correlate this type of
events. So the better way is using REST with some sort of notifications
(email, incident creation,...).


--
jakubmichl
------------------------------------------------------------------------
jakubmichl's Profile: https://forums.netiq.com/member.php?userid=7919
View this thread: https://forums.netiq.com/showthread.php?t=55793

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.