Unsolved
This post is more than 5 years old
9 Posts
0
969
Smarts and Syslog alarms are duplicating events
We are using EMC SMARTS to poll the network, this generates alarms for certain events, that are then sent through to a Netcool system which collects, correlates and displays the alarms for the services operations centre. These alarms are created from the SNMP polling of devices.
There is also Syslog that probes generating alarms that are being sent to Netcool. The problem is that SMARTS and Syslog alarms are duplicating events. This is flooding the service centre with useless alarms and some important alarms are being missed.
How should Smarts be configured to ensure that all required alarms were covered and not duplicated?
Thanks!
raghvendra1
9 Posts
0
May 19th, 2010 20:00
Hi,
I think best way to go forward is raise your syslog alarms with ClassName,InstanceName and Event same as to alarms from the snmp polling.
Instead of raising a new alarm it will only increase count of the existing alarm.
Although you will have to do some manipulations in syslog processing to find out the exact instance , it will be worth it.
Or else, you can choose not to raise alarms for syslogs (DISCARD = TRUE) for the events you are sure you will be getting from polling.
Regards,
Raghvendra