DX Unified Infrastructure Management

Hi,

Does any one know about problem and resolution event correlation in ca spectrum.

I have a doubt on problem and resolution event.How to identify problem and resolution events in spectrum.I have asked this question because I did event correlation in netcool/omnibus.In omnibus we are identified the problem and resolution event based on the NAAM and Type fields.

NAAM(Node,AlertKey,AlertGroup and Manager) fields.Whenever we sent the resolution event the problem event get cleared.So I want to know how to identify the problem and resolution event in ca spectrum.

Here I did the configuration on problem and resolution event correlation in ca spectrum.

AlertMap file:

Problem Event:   1.3.6.1.4.1.22110.2.6.42 0x056e1128 1.3.6.1.4.1.22110.2.1(1,0)\
                                                                                        1.3.6.1.4.1.22110.2.2(2,2)

Resolution Event: 1.3.6.1.4.1.28116.20.6.5247 0x056e1129 1.3.6.1.4.1.28116.20.1(1,0)\
                                                                                                1.3.6.1.4.1.28116.20.2(2,0)

EventDisp:

0x056e1128 E 50 A 2,0x056e1128,1,2
0x056e1129 E 50 0x056e1129 C 0x056e1128

In condition correlation Editor console:

And then sent different problem events with same event code and  whenever I sent the resolution event with same varbind values of problem event,the problem event get cleared.This is the way I have done this task, Is there any other process to do this.

Thanks,

Geethika

You can do the same using event configuration editor. Filter for the event "0x056e1129" and on the right side, add the cause code of the alarm event under Cleared Alarm(s) section. If you are using the discriminators, use the same here as well.

Cheers...

Rajashekar

Thanks Rajashekar,

I have also verified this configuration through event configuration editor.

Just asking you that above steps which I followed was correct or not?I

Is there any other process to do this?

Thanks,

Geetika

Condition correlation is used to identify the root cause alarm from a group of monitored devices in fault isolation.

In your case, defining the clear criteria using Event Configuration editor is enough.

From the screenshot, I don't see that you used discriminators that you used in the alarm event.

Cheers..

Rajashekar

Totally second that. You should absolutely not used the Condition Correlation editor for this purpose. The Event Configuration Editor is the right way to go!

ok, thanku

I have used the event discriminators for alarm processing and thanks for you'r reply.