On Mar 27, 2009, at 7:13 PM, g3vt wrote:
> So been trying to get something fairly basic working today and I
> haven't had much luck... I have a custom check (command data
> source) assigned event class /perf/web with severity debug since i'm
> still testing.
>
> I've attempted to create a mapping in /perf/web to using a regex to
> match.... fail. using a rule to match... fail. using
> defaultmapping.... fail.
>
> At this point I have no clue why its matching. I've run zenhub in
> debug to see if I can find where its matching, but it just says its
> inserting the event into status.
>
> Is it possible that these events are being parsed and then inserted
> without going through the transform / matching process?
Events that already have an event class are not matched against the
event class mappings. The proper way to transform them is by using an
event class transform. Go to the /Perf/Web event class and choose More
-> Transform from the menu. Here you can use Python code to modify any
aspect of the event. For example, the following would change the
severity to Info if the event's summary contains the phrase, "I'm
informational".
if "I'm informational" in evt.summary:
evt.severity = 2
Bear in mind that this transform will be applied to ALL events
entering the /Perf/Web event class, so be sure to make it specific
enough.
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
