Syslog events generate alarms but there is no event to automatically clear them. How can they be automatically cleared after a specified period of time?
Article ID: 16567
Updated On:
Products
Issue/Introduction
A syslog trap that raises a major alarm (0x21001b) is being generated. How can Spectrum clear it after a specific interval time?
How can Spectrum clear any alarm after a specific interval time?
Environment
Release: All Supported Release
Component: SPCAEM - Events and Alarms
Resolution
You can use the Alarm Age Out functionality to do this, but it is limited to an hourly limit. If you would like to specify a different time period, (like less than an hour) then this functionality can be achieved by using an Event Pair Rule.
Assuming you want to automatically clear the major alarm generated by the event 0x0021001b after 30 seconds it was generated, you can do as follows:
- Define a "false" event. This is an event that exists in Event Configuration but that is just used in the Event Pair Rule to trigger an new event to clear the alarm.
Open Event Configuration click on + to define a new event and create a new event eg. 0xfff9999 as follows: - Create an event that is triggered by the Pair Rule after x time that the alarm exists and that is used to clear the alarm 0x21001b.
For example, the event 0xff21001b is used to clear the alarm 0x21001b - Open event 0x0021001b that raises a major alarm and associated to it an event Pair Rule. Click on Event Rule, click on + and select Pair Rule as follows:
In the interval time you can specify days and also hours/min/secs.
So the event 0x0021001b generates a major alarm and for the Event Pair Rule after the interval time specified (eg. 30 sec) It also generates a new event 0xff21001b that, as defined above, will automatically Clear the alarm.
Additional Information
Please reference the "working with Event Rules" section of the documentation for more information:
TechDocs : DX NetOps 21.2 Spectrum : Working with Event Rules
Feedback
