Threshold exceeded: The threshold of EventPurgeWarn has been violated
Article ID: 277523
Updated On:
Products
Issue/Introduction
We received this alarm on the secondary ss.
Threshold exceeded:
The threshold of EventPurgeWarn has been violated on behalf of model <SS_hostname>. The watch source value 452566 is greater than or equal to the threshold reference value of 450000.
Environment
Spectrum: All Supported Versions
Cause
Based on this setting in the .vnmrc:
/usr/Spectrum/SS/.vnmrc
max_event_records=20000
The SpectroServer will retain 20 thousand events (default) if it loses contact with the mysql DDMDB.
It warns at 90% of the set value.
If the value is exceeded, stored events are purged and lost.
Possible causes are mysql is doing a backup or is busy.
(manual or post_olb)
Network issues could slow down processing as well.
Trap or event storm from a device on the network.
Resolution
You can increase the
max_event_records
to accommodate the load in your env as needed.
You can monitor mysql load in taskmanager or top
You will need to recycle the spectroserver for the changes to take affect.
Additional Information
Feedback
