DX Unified Infrastructure Management

  • 1.  Pre-Processing Rules/script to correlate alarms

    Posted Jul 03, 2018 01:49 PM

    Hi All,

     

    I would like to look for two conditions for CPU on a device/robot and generate unique alarm instead of two alarms.

     

    Example: I have setup Total CPU threshold to 90% and load average 5 min to 10.

     

    My requirement is to generate unique alarm on the device when both the Total CPU and load Average 5 min thresholds exceed. That is, generate alarm if Total CPU > 90% and load Average 5 min > 10.

     

    Here, I don't want to have the alarms generated for Total CPU and Load average. I need only One Alarm saying "CPU Utilization is High" based on these two using alarm correlation.

     

    Please suggest me pre-processing rules/scripts that I can use before these alarms generated.

     

    Thank you.

    Rajashekar



  • 2.  Re: Pre-Processing Rules/script to correlate alarms

    Posted Jul 05, 2018 06:21 AM

    Any suggestions or guidance on the above requirement please?



  • 3.  Re: Pre-Processing Rules/script to correlate alarms

    Broadcom Employee
    Posted Jul 05, 2018 08:03 AM

    I am not sure this can be done even with a complex script.

    I would think you would need a custom table or file to track the alarms as they come in.

    Set the original alarms invisible and have logic to create a new alarms.

    all of which could potentially severely slow down your alarm processing depending on how it is implemented.

     

    If the requirement was to say send only one email or to only create one ticket in a service desk you might be able to do that with a set of triggers or script a little easier...

     

    But I think you will be hard pressed to accomplish this the way UIM alarms are currently structured.

     

    Maybe others have some ideas......



  • 4.  Re: Pre-Processing Rules/script to correlate alarms

    Broadcom Employee
    Posted Jul 05, 2018 08:19 AM

    Is CA Spectrum in the picture?  If so, this is an example of "condition correlation" and you can define a rule for that.

     

    -Rob

     

    Sent from my BlackBerry Priv



  • 5.  Re: Pre-Processing Rules/script to correlate alarms

    Posted Jul 05, 2018 10:01 AM

    Thank you Rob. You mean to use the event correlation in Spectrum to generate alarm if both the events occur (one for CPU utilization and One for load).



  • 6.  Re: Pre-Processing Rules/script to correlate alarms

    Broadcom Employee
    Posted Jul 06, 2018 08:25 AM

    Correct.  One of the alarms can be a symptom of the other or both be symptoms of a new alarm.

     

    -Rob

     

    Sent from my BlackBerry Priv



  • 7.  Re: Pre-Processing Rules/script to correlate alarms

    Broadcom Employee
    Posted Jul 06, 2018 10:39 AM

    Hi, this article might be helpful for you:

     

    TECH TIP: Example on Triggers and Auto-Operators.pptx 

     

    "Often, users will only need to be alerted if two or more alarm conditions exist together. For example, you might be monitoring hard drive free space with the CDM probe, but you only want to be alerted if drives C: AND D: both fail."

     

    This article discusses how to set that up. This process does not, however, clear the original two alarms automatically.