My NMS is doing some level of path analysis and therefore root cause and is issuing a stack of events, one for each impacted item, by the same root cause. I am interested in collapsing the several hundred devices into a single event, so that I can attach all of the impacted items to the same ticket. The stack of events usually take less than 60 seconds to complete. In the example below, I would like to change the 100+ events into one - Node down: 172.25.1.177 Root cause impact: 10.20.15.44, 10.20.15.46, ...., 192.168.210.254. I would like some help with the ruleset(s) needed. I understand that I can have a context lifetime and use the context as an event store. The report function can dump the event store before the end of the context lifetime, but I don't know how to use the report function to return a single string.
Is there any collective wisdom on how to handle this? 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.15.44 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.15.46 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.80.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.80.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.80.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.81.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.81.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.81.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.82.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.82.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.82.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.83.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.83.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.83.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.84.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.84.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.84.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.85.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.85.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.85.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.86.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.86.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.86.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.87.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.87.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.87.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.88.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.88.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.88.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.89.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.89.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.89.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.90.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.90.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.90.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.91.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.91.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.91.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.92.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.92.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.92.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.93.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.93.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.93.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.237.1 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.237.5 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.237.13 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.237.17 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.245.65 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 10.20.245.66 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.80.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.80.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.80.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.81.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.81.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.81.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.82.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.82.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.82.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.83.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.83.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.83.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.84.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.84.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.84.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.85.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.85.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.85.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.86.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.86.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.86.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.87.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.87.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.87.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.88.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.88.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.88.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.89.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.89.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.89.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.90.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.90.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.90.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.91.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.91.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.91.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.92.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.92.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.92.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.93.252 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.93.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.17.93.254 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.18.160.12 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.18.160.13 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 172.18.160.14 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.59 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.60 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.61 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.201 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.202 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.253 changing availability to COND 1 is 172.25.1.177 08/10/2010 09:08:24 000009 INFO: (LockableDownStreamIpHash.cpp)Root cause of 192.168.210.254 changing availability to COND 1 is 172.25.1.177 Please advise, Tim -- Tim Peiffer Network Support Engineer Office of Information Technology University of Minnesota/NorthernLights GigaPOP +1 612 626-7884 (desk) ------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users