Smarts SAM: What is the difference between CLEAR and SOURCE-CLEAR Audit log entries?
search cancel

Smarts SAM: What is the difference between CLEAR and SOURCE-CLEAR Audit log entries?

book

Article ID: 303834

calendar_today

Updated On:

Products

VMware Smart Assurance

Environment

VMware Smart Assurance - SMARTS

Resolution

What is the difference between CLEAR and SOURCE-CLEAR Audit log entries in Smarts SAM?



A SOURCE-CLEAR entry in the Smarts SAM Audit log indicates a notification has multiple sources and Smarts SAM has not received a CLEAR from all sources. For example, a notification that can be generated by both Smarts AM and Smarts MPLS has two sources. If Smarts SAM receives a CLEAR for this notification from Smarts AM first, because the notification has another source, it would stay ACTIVE and SAM would put SOURCE-CLEAR in the audit log. Then when SAM receives a CLEAR from Smarts MPLS as well, it will clear this notification, set it to INACTIVE, and put CLEAR in the audit log.

Therefore, if you see SOURCE-CLEAR in the audit log, it means that Smarts SAM has received a CLEAR from one source of a notification that has multiple sources, but not from all sources. If you see CLEAR in the audit log, it means SAM has received CLEAR from ALL sources related to this notification.