[nv-l] : Carefully alerting provided netview.rls
Working on a new environment setup of TEC/Netview.
Like a lot of what's in the products as far as rules and such.
Planning to implement the following event policy:
- Clearing Events from NetView remain open XX minutes. After that time,
they are automatically closed.
My intent is not to alter the underlying correlations in netview.rls at
If a correlation closed or changes something already, let it do so.
In fact the way the rules work now, they do a very good job at this.
But the events that ultimately resolve an ERN (event relationship
network) remain open.
I would like to close them automatically after a reasonable amount of
time (xx minutes).
My thoughts are to add set_timer predicates to each event that passes
of the *_lower rules:
Then I can add a timer_rule into the set: if event is still open, then
Anything already closed by existing rules isn't impacted.
Those 'lingering' open, harmless events are closed.
Thought I give anyone else which some experience with the ruleset a
chance to chime in with
My gut after studing the ruleset is that:
- no current rules or behaviors are impacted
- any re-analysis shouldn't be impacted either
Input is appreciated.
Children's Hospital of Philadelphia
|<Prev in Thread]
||[Next in Thread>|
- [nv-l] : Carefully alerting provided netview.rls,
Jon Austin <=
Archive operated by Skills 1st Ltd
See also: The NetView Web