As far as I know, event transforms are only run when classifying an event. Once it's in the console, you can't change it anymore... But you should get additional events (count going up) every x minutes - often times 5...
You could not send an alert until the count is higher than one. I don't think you can use evt.count in a transform though, as it doesn't know where it's going so it won't know the count till the transform is done. -- James Pulver Information Technology Area Supervisor LEPP Computer Group Cornell University j053ph4 wrote, On 1/21/2009 10:46 AM: > Hi all, > > Does anyone have an idea of how to increase an event's severity based on the > age of the event? > > I have the SNMP linkDown and linkUp events set to correlate/auto-clear in the > event mappings. I'd like to, though, have the SMNP linkDown event increase > its severity (say from Warning to Error) if its age (lastTime) is greater > than 5 minutes. > > Is there an event transform statement something like (pseudocode): > > if "nowTime" - lastTime >= 5 mins: > zEventSeverity == Error > > Thanks! > > > > > -------------------- m2f -------------------- > > Read this topic online here: > http://forums.zenoss.com/viewtopic.php?p=30333#30333 > > -------------------- m2f -------------------- > > > > _______________________________________________ > zenoss-users mailing list > [email protected] > http://lists.zenoss.org/mailman/listinfo/zenoss-users _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
