Smarts SAM: Receive clear event from an underlying domain even though event has already cleared

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:




Receive message when a clear event is received from an underlying domain, but the notification in question is already cleared.

The following message appears multiple times in Smarts SAM Aggregation and Smarts OI server logs:

INCHARGE-OI_NL-Driver-HyperNotif
EMS-*-DISCARDED_EVENT_DISP-DISCARDED EVENT: NOTIFICATION-<Instance> - Reason: Already Cleared - Source: INCHARGE-OI

Environment

VMware Smart Assurance - SMARTS

Cause

This message occurs when a clear event is received from an underlying domain, but the notification in question is already cleared. One scenario where this may occur is when momentary notifications are generated from underlying domain with a expiration time. After that expiration time has passed, the notification gets cleared in underlying domain, the Aggregation SAM and Presentation SAM. But the underlying domain would generate a clear notification, which would in turn be processed by Aggregation/Presentation server and result in this message. The audit logs in this case from the Smarts OI and SAM servers can be examined to see whether this is happening.

Resolution

Smarts SAM is working as expected and designed, and there is no workaround for this product behavior.