Can someone help me with applying NetView rules to filter events sent to T/EC.
I have built a simple 3 step rule
1) Event Stream (set to pass all events)
2) Event Attributes (set to pass all events where severity! = 1 i.e. don't pass events of severity Indeterminate)
3) Forward
I then implement the rule (there are several ways to do this - but I have been using the serversetup GUI). This must be working because my rule file is entered into /usr/OV/conf/tecint.conf
Problem. All events including Indeterminate severity are passed to T/EC. (Indeterminate events have a T/EC status of UNKNOWN). I can't stop it. No matter what nodes I enter after Event Stream ( if it is set to pass all events), all events are sent to T/EC i.e. nothing is filtered out.
If I amend Event Stream (to block all events) - nothing arrives in T/EC. It appears as if my rules are not being processed. Can someone else duplicate this - as I think it might be a bug. However, I do not want to raise a PMR until I'm sure I'm not doing something wrong.
Thanks for your help
John Mackney
Technical Design Authority
Logical eBOC
Logical (UK) Ltd.
Email: john.mackney@uk.logical.com
|