Hmm - that kind of works, I actually did some testing on the following: (I had to use 0300 instead of 009)
0xffff0008 E 20 R Aprisma.EventRateWindow, 5, 180, 0xffff0300\
A 2,0xffff0008,1
0xffff0300 A 2,0xffff0300
This rule opened the five 008 alarms, and then opened the 300 alarm which is
ok. I just need to put in the clearing action.
________________________________
From: Sperandio Christophe [mailto:[email protected]]
Sent: Friday, July 10, 2009 12:28 AM
To: Steve Kato; spectrum
Subject: RE: combined rules
Hi,
Yes, it is possible! ;) What I suggest for what you want is to create an alarm
for ffff0008 (without the Unique attribute, so you will have as standard only
one of this type) then to create a EventRate rule with your parameters (5 times
in less than 3 minutes) which creates the ffff0009 event and at the same time
clears the ffff0008 one...
Regards,
Christophe Sperandio
Consultant - Ingénieur d'intégration - Leader KC ITSM
SSM - OM
Tel. : +33 (0)1 41 49 48 48
Mob. : +33 (0)6 50 08 25 85
[email protected] <mailto:[email protected]>
Please consider the environment - do you really need to print this email ?
De : Steve Kato [mailto:[email protected]]
Envoyé : jeudi 9 juillet 2009 23:28
À : spectrum
Objet : [spectrum] combined rules
Hi -
Anyone out there know if there's a way to combine rules? It's not really clear
in the documentation - what I want to do is set up a rule or rules that do the
following:
Setup a rule that creates an alarm for each incoming event, ffff0008 but if I
receive five ffff0008 events in three minutes, then create event/alarm ffff0009
and don't create anymore ffff0008 alarms until alarm ffff0009 is cleared.
Steve Kato
Recreational Equipment Inc. (REI)
http://www.rei.com <http://www.rei.com/>
email: [email protected]
phone: 253-437-7309
* --To unsubscribe from spectrum, send email to [email protected] with the
body: unsubscribe spectrum [email protected]
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]<<image002.gif>>
<<image001.gif>>
