Smarts SAM: What is the difference between CLEAR and SOURCE-CLEAR Audit log entries?
Article ID: 303834
Updated On:
Products
VMware
Environment
VMware Smart Assurance - SMARTS
Resolution
What is the difference between CLEAR and SOURCE-CLEAR Audit log entries in Smarts SAM?
A SOURCE-CLEAR entry in the Smarts SAM Audit log indicates a notification has multiple sources and Smarts SAM has not received a CLEAR from all sources. For example, a notification that can be generated by both Smarts AM and Smarts MPLS has two sources. If Smarts SAM receives a CLEAR for this notification from Smarts AM first, because the notification has another source, it would stay ACTIVE and SAM would put SOURCE-CLEAR in the audit log. Then when SAM receives a CLEAR from Smarts MPLS as well, it will clear this notification, set it to INACTIVE, and put CLEAR in the audit log.
A SOURCE-CLEAR entry in the Smarts SAM Audit log indicates a notification has multiple sources and Smarts SAM has not received a CLEAR from all sources. For example, a notification that can be generated by both Smarts AM and Smarts MPLS has two sources. If Smarts SAM receives a CLEAR for this notification from Smarts AM first, because the notification has another source, it would stay ACTIVE and SAM would put SOURCE-CLEAR in the audit log. Then when SAM receives a CLEAR from Smarts MPLS as well, it will clear this notification, set it to INACTIVE, and put CLEAR in the audit log.
Therefore, if you see SOURCE-CLEAR in the audit log, it means that Smarts SAM has received a CLEAR from one source of a notification that has multiple sources, but not from all sources. If you see CLEAR in the audit log, it means SAM has received CLEAR from ALL sources related to this notification.
Feedback
Yes
No
Powered by
