Getting duplicate alerts of a single alert from UIM into SOI
search cancel

Getting duplicate alerts of a single alert from UIM into SOI

book

Article ID: 115744

calendar_today

Updated On:

Products

CA Service Operations Insight (SOI)

Issue/Introduction

I am getting duplicate alerts of a single alerts in SOI console from UIM

<Please see attached file for image>

UIM Duplicate Alerts

Environment

SOI 4.2 UIM Connector & SOI Manager running in MS Cluster

Resolution

There are 2 UIM Connectors installed on 2 windows machines and connecting to the same UIM Server and reporting to 2 SOI Managers.
1st Connector is working as expected without any duplicate alerts, the second connector is publishing duplicate alerts with different Source Alert ID values.

In general, the NIM ID in UIM should math with "Source Alert ID" in SOI Alert Console, but here the 2nd connector "Source Alert ID" values(format also) are completely different and they do not match with NIM ID in UIM. No Event enrichment policies deployed on either Manager or Connector.

In the process of troubleshooting, we enabled debug traces and recycled "CA Catalyst Container" services on the connector in the question, since then it stopped publishing duplicate alerts & Source Alert ID values does match with Nim ID values in UIM

Attachments

1558695443213000115744_sktwi1f5rjvs16i4x.png get_app