We have a similar situation. What we have been doing for years is to utilize AlarmNotifier. We have the initial trap trigger a minor alarm every time it is received. The alarm lasts for about 5 minutes. Since it triggered an alarm, we have a SANM policy that forwards this alarm over to AlarmNotifier, where we run it through a perl script that parses the data, calculates the information, updates an RRD and checks the values to generate one of 4 events (all ok, minor level error rate, major level error rate, critical level error rate). Since these are supposed to arrive on a regular basis, we also have an event rule that triggers if we miss 2 periods.
Future -We would like to use another method. One idea was to use an EventProcedure to parse the trap and save the values into attributes on the model. Then we would use all the normal mechanisms like SpectroWATCH, SRG, EventRules to process. Downside, maintenance on EventProcedures could be difficult. They are not openly documented and can cause major issues if written improperly. Another idea is to use a new CA tool that we have purchased called Event Integration Service (EIS). With this, we could have the device send the trap to an EIS system that is grabbing all traps, or we could have EIS take that "minor" alarm. Then process the information. Bill Barnes -----Original Message----- From: yathrib [mailto:[email protected]] Sent: Thursday, March 19, 2009 7:41 AM To: spectrum Subject: [spectrum] rate calculation from trap Hi, I have an alarm with multiple values coming in, like: packets sent = 123 packets lost = 1 I've mapped these in the AlertMap. Is there any way to calculate a rate in the EventDisp, to then alarm on a threshold exceeded? # more than 5% loss is bad R Aprisma.EventCondition, "{VARDATA 2} / {VARDATA 1} > {I 5}", "0x1", "default", "0x0" Otherwise I'm left doing a straight compare against the raw value: # more than 10 packets lost is bad R Aprisma.EventCondition, "{VARDATA 2} > {I 10}", "0x1", "default", "0x0" -- yathrib --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
