search cancel

How can we clear all queued alarms from the pollagent?

book

Article ID: 190689

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We have disabled the SNMPCollector right now, but we are still getting alarms coming in from an hour ago. We don’t see any alarms queued in the nas or the hub queues. Is there anywhere where we can clear out the existing alarms for the SNMPCollector?

Environment

Release : UIM 20.1

Component : UIM - SNMPCOLLECTOR
- pollagent

Cause

- baseline_engine cached alarms

Resolution

Q. We are still receiving alarms from snmpcollector even though we deactivated the probe. How can we clear all queued alarms from the snmpcollector pollagent?

You can do either of the following:

a) filter alarms in IM or USM alarm view by the robot (where snmpcollector installed) and probe (pollagent), then select these and acknowledge them, but if you still receive further alarms then choose the next option...

b) deactivate the baseline_engine on the hub where you're running the snmpcollector
If you delete the baseline_engine cache_dir, that will FLUSH all alarm definitions from snmpcollector, until snmpcollector is Activated again.  Then all alarms defined in the applied templates should repopulate the cache_dir files in the baseline_engine.  If you have ToT alarms defined, they should be re-sent to the alarm_enrichment probe. If you have other probes that were configured through AC with alarms managed by the same hub where the baseline_engine is deployed, those probes will also have to be cold started as well since you will lose their alarm thresholds from that action.

Q. How can we temporarily disable SNMPC templates so that when its activated again, it does not start applying the rules in the templates?

A. You can 'disable' the snmpcollector templates by doing the following:
- Deactivate the snmpcollector probe.
- You can then go into the actual template file in the build_config directory and modify the flag that indicates that the template is active to deactivate the template.  You would do this for all of the custom templates, save the changes and then activate the probe.  No templates are applied and no monitoring is performed until you go in through the Template Editor and activate the custom templates.

Q. How to run a query and get results for the devices we are collecting metrics from today and compare them to what we were collecting from a given day last week?

SELECT ss.table_id, ss.sampletime, ss.samplevalue, sd.ci_metric_id, sd.qos, sd.target, sd.probe, sd.r_table
FROM S_QOS_SNAPSHOT ss
JOIN S_QOS_DATA sd on ss.table_id = sd.table_id
where probe = 'pollagent'
and ss.sampletime > '05/12/2020 23:59:59' order by ss.sampletime DESC

-- Adjust the date to suit your specific purposes
-- The following WHERE filter is an example which will limit the results of the above statements.
-- This can be changed to reflect any of the columns and cells found in S_QOS_DATA
WHERE probe = '<probe_name>' and <target> = '<target_name>'