ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Syslog events generate alarms but there is not an event to automatically clear them. How can SPECTRUM automatically clear an alarm after a specified period of time?


Article ID: 16567


Updated On:


CA Spectrum


Customer is getting a syslog trap that generates a major alarm (0x21001b). How can Spectrum clear it after a specific interval time?

How can Spectrum clear an alarm after a specific interval time? 




You can use the Alarm Age Out functionality to do this, but it is limited to an hourly limit.  If you would like to specify a different time period, (like less than an hour) then this functionality can be achieved by using an Event Pair Rule. 

Assuming you want to automatically clear the major alarm generated by the event 0x0021001b after 30 seconds it was generated, you can do as follows:

1) Define a "false" event. This is an event that exists in Event Configuration but that is just used in the Event Pair Rule to trigger an new event to clear the alarm.

Open Event Configuration click on + to define a new event and create a new event eg. 0xfff9999 as follows:

<Please see attached file for image>


2) Create an event that is triggered by the Pair Rule after x time that the alarm exists and that is used to clear the alarm 0x21001b.

eg. the event 0xff21001b is used to clear the alarm 0x21001b

<Please see attached file for image>


3) Open event 0x0021001b that raises a major alarm and associated to it an event Pair Rule. Click on Event Rule, click on + and select Pair Rule as follows:

<Please see attached file for image>


In the interval time you can specify days and also hours/min/secs. 

So the event 0x0021001b generates a major alarm and for the Event Pair Rule after the interval time specified (eg. 30 sec) It also generates a new event 0xff21001b that, as defined above, will automatically Clear the alarm.

Additional Information

Please reference the "Working with Event Rules" section of the documentation for more information.


1558687853512000016567_sktwi1f5rjvs16ffe.png get_app
1558687851696000016567_sktwi1f5rjvs16ffd.png get_app
1558687848887000016567_sktwi1f5rjvs16ffc.png get_app