thanks for the reply. the event is already in the unknown class, so i don't understand why it won't remap. this stuff is way beyond my brain, the even transform stuff is greek to me.
below is the even detail (small bits removed for privacy). i'm lost. it just doesn't seem 'right' to me that there's an option to remap an even to a different class, but when you do so, it just says '0 events remapped'. is that the desired behavior? it seems counter-intuitive. Field Value dedupid appxx|MC0|||4|GART TLB errorr: transaction type(generic), cache level(generic) evid 0aff2866370a38c2fc09702 device appxx component MC0 eventClass /Unknown eventKey summary GART TLB errorr: transaction type(generic), cache level(generic) message GART TLB errorr: transaction type(generic), cache level(generic) severity 4 eventState 1 eventClassKey eventGroup syslog stateChange 2008/07/29 21:18:09.000 firstTime 2008/07/29 21:02:10.000 lastTime 2008/07/29 21:02:10.000 count 1 prodState 1000 suppid manager localhost agent zensyslog DeviceClass /Server/Linux/xxxxApp Systems |/Production/App DeviceGroups | facility kern priority 3 ntevid 0 ownerid admin deletedTime 2008/07/29 21:18:13.000 clearid DevicePriority 3 eventClassMapping -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=23092#23092 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
