Smarts 9.4.2 | Global SAM with multiple AGG sams feeding it is not synced

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:


Alerts between the multiple AGG sams and the Global SAM are inconsistent. There are hundreds of alert discrepancies.

Environment

VMware Smart Assurance - SMARTS

Cause

Notification list in the AGG and PRES SAM console were not the same.

The AGG SAM notification console had other notifications from other Notification List.

The Presentation SAM was only receiving notification from GNCC-Buckets Notification List as shown in the dxa-sam-gc.conf file  The missing events were not part of GNCC-Buckets.

The missing notifications at one point were present in the Presentation console this was because the filter used in GNCC-Buckets passed filter constraints for DownOrFlapping but later failed the filter constraints. 

Resolution

In this case the filter was modified so that it doesn't use fields like Owner or other fields associated with operator actions. This ensured that it was not later failing the filter constraints.