Calvin, list, frankly I don't see how to do this with Event Rules. AFAIK, you can set event rate rules on events on the same model, but not across models (that's why we call Condition Correlation "cross model correlation", I guess). I have a similar problem, but it goes a bit further, since I want to suppress alarms until there are in fact two alarms - and these alarms should be compacted into one...
Using SPM, I have two Cisco routers testing the same host for some TCP port responsiveness (or for that matter anything else those two routers do tests against). Those routers are in two completely differing corners of my network, and so it happens that one router runs into timeout while the other doesn't. That means there is one alarm which is in fact bogus, because the feature the router is testing is in fact up and running. One might correlate this in mind - "One alarm is okay, two alarms are bad" -, but it would be very helpful to use automation to let an alarm rise if and only if there are parallel alarms for the same test from both test routers. One way could be to create a Correlation Domain for each test (which could mean driving some hundred domains!) and use the event count feature to suppress the SPM test's alarms and assert an alarm on the domain itself. This, in fact, only solves my "two alarms for one problem" question but does not suppress the alarm if there is only one, which is my main problem. Freundliche Grüße / Best regards Christian Fieres Mainova AG Planung und Betrieb Infrastruktur (M3-ON2) Service Operation Center Solmsstraße 38 60623 Frankfurt Telefon / Phone (069) 2 13-2 36 17 Mobil / Mobile (0170) 5 60 15 63 Telefax / Facsimile (069) 2 13-9 62 36 17 E-Mail [email protected] Von: "Calvin Lane" <[email protected]> An: "spectrum" <[email protected]> Datum: 16.11.2011 16:54 Betreff: RE: [spectrum] Spectrum 9.2 Condition Correlation Editor Hello Dan, I would probably lean towards Event Rules and not Condition Correlation Editor. Depending on the how the events from those two servers would come in, you could create an ?event series?, ?event counter?, or ?event rate? rule. This would be done in the Event Configuration Editor. Let me know if you have any questions. Calvin From: Tadysak, Dan E [mailto:[email protected]] Sent: Wednesday, November 16, 2011 9:53 AM To: spectrum Subject: [spectrum] Spectrum 9.2 Condition Correlation Editor I have gone thru the Condition Correlation guide and I am still very confused on how to do something I think should be very simple so I need help or more examples. I have 2 servers that will send the same trap. However, I want only one alarm. The reason is that it is a fault tolerant EMC system and if either server is down I need to make sure I still get the alarm but I don?t want two of them. I have been trying to figure out how to use the CCE but the docs don?t have a good example. Anyone have any examples they can share or offer any suggestions? Thanks, --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] Mainova Aktiengesellschaft ? Solmsstraße 38 ? D-60623 Frankfurt am Main Vorsitzende des Aufsichtsrates: Oberbürgermeisterin Dr. h. c. Petra Roth Vorstand: Dr. Constantin H. Alsheimer (Vorsitzender), Dr. Peter Birkner, Lothar Herbst, Dr. Marie-Luise Wolff Sitz der Aktiengesellschaft: Frankfurt am Main ? Amtsgericht Frankfurt HRB 7173 ? USt-ID-Nr. DE 114184034 Mainova steht für besten Service, faire Verträge und top Preise für Ihre Energie - mit Auszeichnung! Mehr Infos unter: http://www.mainova.de/auszeichnung --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
