On May 5, 2009, at 7:11 AM, petzi43 wrote: > I'm not the programmer or phyton specialist and I would like to get > rid of some events automatically. The events are the ones when the > interface bandwith is fully used. Of course I would only filter > events from special interfaces, e.g. where the component field is > Serial.* - means everything beginng with Serial > > My approach was to create a defaultmapping (because those events are > showing up from zenoss without an event class key. > The I would like to create a rule which is TRUE for alle components > beginning with Serial but I didn't find an example for that. I just > managed to create exact matches like >> evt.component == "Serial" > . > > How can I use a wildcard there??? > > At the end I would like to match > Code: > threshold of high utilization exceeded > > in the summary field of the event. > > If all is TRUE it should put the severity to 2 (info, right?) and > put it into history. > > Is it not possible with the rule?
It isn't possible to map these types of events. This is a common misunderstanding about the event system. If an event already has an event class that is not /Unknown, it doesn't get mapped. However, there is a good way to deal with serial interfaces specifically in another way. If you go into the details (from the OS tab) of any of your serial interfaces you will likely see that their type is "propPointToPointSerial". We can use this to create a performance template that will only be applied to serial interfaces. This template won't have any thresholds defined on it. Go to /Devices and click on the Templates tab. You will see a template called ethernetCsmacd. Put a check in it to select it, then choose copy templates from the menu. Choose the root device class (where you already are) to copy the template into. You will now have a "copy of ethernetCsmacd" template. Click into it to edit it. You want to change the name to "propPointToPointSerial" and remove any thresholds. That's all you have to do. This new template will automatically be applied to all serial interfaces in the system due to its name being propPointToPointSerial. _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
