Smarts SAM: How to unsubscribe from Port Disabled or Interface Disabled events in Smarts SAM?
search cancel

Smarts SAM: How to unsubscribe from Port Disabled or Interface Disabled events in Smarts SAM?

book

Article ID: 303935

calendar_today

Updated On:

Products

VMware

Environment

VMware Smart Assurance - SMARTS

Resolution

How to unsubscribe from Port Disabled or Interface Disabled events in Smarts SAM?
How can I stop receiving Port Disabled or Interface Disabled events in Smarts SAM?




To unsubscribe from Port Disabled or Interface Disabled events in Smarts SAM, do the following:
  1. Open the dxa-conn.conf configuration file for editing using sm_edit on the system that SAM uses to communicate with underlying domain as follows: 

    <BASEDIR>/SAM/smarts/bin/sm_edit conf/ics/dxa-conn.conf
     
  2. Find the following entry:

    sub     .*::.*::.*/p
     
  3. Change this entry to the following:

    sub     *::*::~Disabled/pg

    Note: By using the "g" modifer, the ".*" becomes "*" for the class and instance.
     
  4. SAM will now subscribe to all problem events except for Disabled events.   
     
  5. Open the ics-event-driver.asl file for editing for editing using sm_edit as follows:

    <BASEDIR>/SAM/smarts/bin/sm_edit rules/ics/ics-event-driver.asl
     
  6. Add the following "ChoiceSubscription" line where highlighted in bold below:

    ChoiceSubscription->symptoms = glob("*s*|*e*", Modifiers);
    ChoiceSubscription->glob = glob("*g*", Modifiers); // Add this line
    ChoiceSubscription->quiet = TRUE;
     
  7. Restart the SAM server to apply the change. Note that this will not filter out current Disabled events already received (see Note statements). 


Additional Information

In order to filter out current events and for instructions on using the filter feature, please see How can "Disabled" events be filtered from Smarts SAM Console?.

For all the options available for suppressing Port Disabled and Interface Disabled events in Smarts SAM, see Smarts AM/SAM: How can I suppress 'Interface Disabled' or 'Port Disabled' event notifications?.