I believed I got the type and host right (event view display 
the right type name an host name).  However, I'm not sure I 
fed the right interface.  I used the ip address and... the ip 
I fed does not defined in hosts/interfaces table.

Anything wrong?

Thanks,

Min


-----Original Message-----
From: Craig Small [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 30, 2005 5:44 PM
To: [email protected]
Subject: Re: [jffnms-users] How to clear syslog alerts

On Wed, Mar 30, 2005 at 04:37:14PM -0500, Min Qiu wrote:
> I've tried to use state="up"/"down", I've also tried to use 100 in 
> types.alarm_up but failed to change the color.
> Do I need to define another type with severity=1 and have 
> types.alarm_up pointed to the new type?  It appears I miss-understood 
> how things are worked.  Please help.

The consolidator will clear the down event when it sees an up event that
has the same type, host and interface.

If you dont need an interface field then put something in there and
don't show it up in the event.

 - Craig

-- 
Craig Small      GnuPG:1C1B D893 1418 2AF4 45EE  95CB C76C E5AC 12CA
DFA5
Eye-Net Consulting http://www.enc.com.au/   MIEE         Debian
developer
csmall at : enc.com.au                      ieee.org
debian.org


-------------------------------------------------------
This SF.net email is sponsored by Demarc:
A global provider of Threat Management Solutions.
Download our HomeAdmin security software for free today!
http://www.demarc.com/info/Sentarus/hamr30
_______________________________________________
jffnms-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jffnms-users



-------------------------------------------------------
This SF.net email is sponsored by Demarc:
A global provider of Threat Management Solutions.
Download our HomeAdmin security software for free today!
http://www.demarc.com/info/Sentarus/hamr30
_______________________________________________
jffnms-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jffnms-users

Reply via email to