SAM Domain Manager using glob to suppress certain symptoms along with the dxa-conf-perf.conf file may lead to missing HighErrorRate

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:

Smarts IP issue with dxa-conn-perf.conf localization

• We know that the following change to dxa-conn-perf.conf, using a glob, would suppress importing certain types of symptoms
  
  
• We had the following in the dxa and we did not have issues with HighErrorRate alerts 
  # Performance #sub NetworkAdapter_Performance::.*::.*/e sub
  NetworkAdapter_Performance::.*::~HighBroadcastRate||HighQueueDropRate/eg
  
  
• The requirement is to suppress the HighDiscardRate alerts and we used the following statement:
  # Performance #sub NetworkAdapter_Performance::.*::.*/e sub NetworkAdapter_Performance::.*::~HighBroadcastRate|HighDiscardRate|HighQueueDropRate/eg
  
  
• No HighErrorRate alerts showed up in the 'audit' files for the last month. so why does suppressing HighDiscardRate also suppress HighErrorRate.
  
  

Environment

Smarts 10.1.X

Resolution

In the ics--event-driver.asl

Add the following "ChoiceSubscription" line where highlighted in bold below:

ChoiceSubscription->symptoms = glob("*s*|*e*", Modifiers);
ChoiceSubscription->glob = glob("*g*", Modifiers); // Add this line
ChoiceSubscription->quiet = TRUE

In the dxa-conn-perf.conf use the following line:  

sub NetworkAdapter_Performance::*::~HighBroadcastRate|HighDiscardRate|HighQueueDropRate/eg

NOT

sub NetworkAdapter_Performance::.*::~HighBroadcastRate|HighDiscardRate|HighQueueDropRate/eg

Note: using * and not .*

The reason is that using  with the ‘g’ modifier, the wildcard semantics change from regexp format to glob.