I found a way to solve this.... the trick was to use the transform function in
a unique class map... I did the following:
1. Create a new event Class Mapping /Events/logs ( all defaults nothing fancy )
2. Setup the event transform for this class. I added the following transform:
if evt.message.find("restored"):
evt.severity = 3
evt.summary = "threshold of VAR_MESSAGES exceeded"
evt._action = 'status'
As I understand it it does the following:
----match the test "resored" and this find a message thats relivant
----change the severtiy to a warning
----change the text to whatever I put in the quotes
----put the alert in the event console
I used "restored" as I saw that was the useful key text to match for a clear
found it by looking at the clear events in the log history.
That's it... I get exactly what I wanted, a single alert that stays in the
Event log until I'm ready to remove it. Perfect for Log Parsing..
Cheers,
Mark
-------------------- m2f --------------------
Read this topic online here:
http://community.zenoss.com/forums/viewtopic.php?p=24216#24216
-------------------- m2f --------------------
_______________________________________________
zenoss-users mailing list
zenoss-users@zenoss.org
http://lists.zenoss.org/mailman/listinfo/zenoss-users
