Ways to filter out the alarm based on the device name {S6} using event configuration in Spectrum

Products

• DX NetOps
• CA Spectrum

Issue/Introduction

We are looking for ways to filter out the alarm based on the device name {S6} using event configuration. 

A "downAP" event has occurred, from {t} device, named {m}.

This trap is sent when the Access Point (AP) is down (for instance, a missed SNMP Ping or SNMP Get).

awampEventID = {I 1}
awampEventSeverityCode = {I 2}
awampEventDescription = {S 3}
awampAPIP = {O 4}
awampAPEthMAC = {S 5}
awampApName = {S 6}
awampFolderPath = {S 7}

It's either to create an event/alarm for any device with this name format : AA1111 (start with any 2 alphabetic characters and follows with 4 digits) only - eg: au01111-building1-lap01

OR not to create event/alarm for any device with a name that starts with set characters (such as AP) and a format similar to the following:

AP0227.e333.beac

AP1444.7308.33EX

Which option is the best and how?

Environment

DX NetOps Spectrum Release : 22.2

Resolution

Remove the Severity from this Event and create event condition rule(s) that can parse through the device name to determine if further action needs to be taken (assert alarm or not)

Event Attribute = 6 

Operator        = Regex

 

Then create a new event with the severity and generate the new event there.

 

TechDocs : DX NetOps Spectrum 22.2 : About Event Disposition Files

NOTE: You cannot edit procedures through the GUI.  You must edit procedures through the files only.