Pretty easy to make a rule using the
"Reset-on-Match" node to hold an event
for a period of time set in the
"Reset-on-Match" node and not forward
it if a resetting event is revieved
in that time period. I use it to smooth
out Interface Down/Up and Node Down/Up
events.
Works great!
Les Dickert
Verisign Consulting
>From: James_Shanks@tivoli.com
>Reply-To: IBM NetView Discussion <nv-l@tkg.com>
>To: IBM NetView Discussion <nv-l@tkg.com>
>Subject: Re: AW: [NV-L] Rulesets - Filtering multiple Events [ND.Cerberus
>chec ked]
>Date: Tue, 8 May 2001 11:28:50 -0400
>
>
>This sounds like a netmon issue and I don't do netmon. However my guess is
>that you need to fix your polling timeouts and retries in xnmsnmpconf so
>that things are not marked down so quickly.
>
>James Shanks
>Team Leader, Level 3 Support
> Tivoli NetView for UNIX and NT
>
>
>
>Michel.Grossenbacher@coop.ch@tkg.com on 05/08/2001 10:32:09 AM
>
>Please respond to IBM NetView Discussion <nv-l@tkg.com>
>
>Sent by: owner-nv-l@tkg.com
>
>
>To: nv-l@tkg.com
>cc:
>Subject: AW: [NV-L] Rulesets - Filtering multiple Events [ND.Cerberus chec
> ked]
>
>
>
>Hy James
>I got a similar problem like Alexander, but the problem isnt a
>misconfiguration of the agent, cause we dont use agents to send traps in
>that meaning. I just recieve Node/Interface Down/Up Events Netview
>generates
>itself. I get a lot of that events but its a problem of oure FrameRelay
>most
>of the time, short "poweroutages" and such things, mostly a few seconds, I
>dont know yet how we can fix it but its definately not a problem of the
>Agent on that Nodes.
>
>Michel
>
>-----Ursprüngliche Nachricht-----
>Von: James_Shanks@tivoli.com [mailto:James_Shanks@tivoli.com]
>Gesendet am: Dienstag, 8. Mai 2001 16:00
>An: IBM NetView Discussion
>Betreff: Re: [NV-L] Rulesets - Filtering multiple Events [ND.Cerberus
>checked]
>
>
>What did you try and why didn't it work?
>
>You should be able to do this with a threshold node but all the trap
>processing remains in the background, only the display is uncluttered. The
>best solution to your problem is to fix the offending nodes. If an agent
>is sending you traps at more than one per minute then it is misconfigured,
>and it should be fixed so that it does not eat all the bandwidth available
>by sending pointless traps. But if you cannot fix it, then I suggest you
>implement MLM on the same box as NetView as a trap filter.
>
>James Shanks
>Team Leader, Level 3 Support
> Tivoli NetView for UNIX and NT
>
>
>
>Alexander.Korn@allianz.at@tkg.com on 05/08/2001 09:50:13 AM
>
>Please respond to IBM NetView Discussion <nv-l@tkg.com>
>
>Sent by: owner-nv-l@tkg.com
>
>
>To: nv-l@tkg.com
>cc:
>Subject: [NV-L] Rulesets - Filtering multiple Events [ND.Cerberus checked]
>
>
>
>Does anyone solved a problem like mine? I try to build a ruleset which
>filters multiple events coming up in high count and short time. It looks
>simple but anyway, Ifound no solution.
>I like to filter out all same events from the same node coming up in less
>as a minute twice or more.
>Any solution would be great for me.
>
>many thanks in advance,
>
>Alexander Korn
>
>_________________________________________________________________________
>NV-L List information and Archives: http://www.tkg.com/nv-l
>
>
>
>_________________________________________________________________________
>NV-L List information and Archives: http://www.tkg.com/nv-l
>_________________________________________________________________________
>NV-L List information and Archives: http://www.tkg.com/nv-l
>
>
>
>_________________________________________________________________________
>NV-L List information and Archives: http://www.tkg.com/nv-l
_________________________________________________________________
|