Looking for an alarm from Vertica to CAPC

Products

• CA Performance Management - Usage and Administration

Issue/Introduction

Check event alarm from Vertica to CAPC

Environment

PM 20.x

Cause

Some alarms were not cleared

 

Resolution

CAPC Event Display Alarm Raised:
A Threshold Violation event has been raised on "CPU 24". (Profile Name: CPU, Rule Name: CPU Utilization > 90 (%)).
Alarm ID 434706

Get component CPU 24 ItemID, example CPU Component:

 

Connect to vsql on the Vertica host as the dauser, and run:
cd /opt/vertica/bin

./vsql -Udauser -wdbpass (your password may vary)

select alarm_id, item_id, start_time, to_timestamp(start_time) from dauser.alarm where item_id = 369634 and alarm_id = 434706;

select alarm_id, item_id, start_time, to_timestamp(start_time), clear_time, to_timestamp(clear_time) from dauser.alarm_clear where item_id = 369634 and alarm_id = 434706;

Get the alarm_id from Vertica query output, example:
select alarm_id, item_id, start_time, to_timestamp(start_time) from dauser.alarm where item_id = 287165 and alarm_id = 434697;
-[ RECORD 1 ]+--------------------
alarm_id     | 434706
item_id      | 369634
start_time   | 1619717400
to_timestamp | 2021-04-29 14:30:00

So on CAPC Server call mysql and run:

use netqosportal

select NPCEventID, from_unixtime(OccurredOn) from em.event_properties where Name='_Alarm_ID' and Value=434706; (Note the all NPCEventID)
Example:
+------------+---------------------------+
| NPCEventID | from_unixtime(OccurredOn) |
+------------+---------------------------+
|     701375 | 2021-04-29 14:30:00        |
|     701375 | 2021-04-29 14:35:00        |
+------------+---------------------------+
2 rows in set (0.25 sec)

select NPCEventID, from_unixtime(OccurredOn), Description, ItemID from em.events where NPCEventID = ' 701375';  (Inform the NPCEventID from first select)
Repeat this query for all  NPCEventID from first select

If you cannot see the Clear event take a look in em.unresolved_event_items table:

select * from em.unresolved_event_items where NPCEventID = 701375'; (Inform the NPCEventID from first select)
Repeat this query for all  NPCEventID from first select

 

 

 

 

Additional Information

·      Threshold violation events have started in my system to date

vsql>select count(*) from alarm;

 

 

·      Threshold violation events are currently ongoing in my system at this time?

vsql>select count(*) from alarm where clear_time = 0;

 

·     Threshold violation not Cleared:
select count(*) from alarm where not exists (select NULL from alarm_clear where alarm.alarm_id=alarm_clear.alarm_id);

 

·     Threshold violation Cleared:
select count(*) from alarm where exists (select NULL from alarm_clear where alarm.alarm_id=alarm_clear.alarm_id and alarm_clear.clear_time > 0);