I'm evaluating Zenoss v2.1.2 and am using syslog to capture some
custom events. The capturing of events is working great and they
show up just fine in the dash board. What I need to do now is for
the event to clear based on another syslog event I send.
For example. On the host in question I can run this:
/usr/bin/logger -p daemon.info -t CRITICAL This is a test.
This puts the Critical event in my event list which I then added as
an Event Class mapping with severity Critical.
Next I can send an event like this:
/usr/bin/logger -p daemon.info -t OK This is a test.
I have this mapped in the event class as well with a severity of
Clear. What I need to do is have the "OK" event clear the
"CRITICAL" event. I've tried putting in the full path of the event
class mapping of the OK event in the zEventClearClasses of the
CRITICAL mapping, but it doesn't do anything - the clear event just
goes into history leaving the original CRITICAL as is.
The trick here would be to make sure both events have the same
eventKey. This is what will cause the CLEAR to match the original
event. You can set the eventKey in the transform for both mappings.
evt.eventKey = 'myUniqueEventKey'
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
