how to filter or control which alarms are sent to moogsoft

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

You are integrating UIM with Moogsoft by following the instructions provided by Moogsoft.  This results in all UIM alarms being sent to Moogsoft without any filtering.

You would like to send only some of the alarms to Moogsoft instead of all alarms.

Environment

DX UIM - Any Version

alarms forwarded to Moogsoft 

Resolution

Normally, alarm integration to Moogsoft is accomplished by setting up a queue called moogsoft_alarm_queue which listens to subject 'alarm' which the Moogsoft UIM LAM connects to in order to retrieve the messages.

In order to gain further control or filtering over the alarms which are sent to Moogsoft, we can change the subject of this queue, and use a NAS Auto-Operator to forward the desired messages to the queue with this new subject.

 

1. Open the primary hub GUI and go to the 'Queues' tab.  Locate the queue called 'moogsoft_alarm_queue' and Edit this queue.
2. The queue will have the subject set to 'alarm' - change this to a unique subject like moogsoft_alarm instead.
   
3. Now, in the NAS probe, you will need to create an Auto-Operator rule of type "repost" to repost the desired alarms to the moogsoft_alarm subject/queue.  The below example shows a simple profile where all Major and Critical alarms are reposted on arrival.
   
   
   
   

This can be customized in whatever way is necessary to select specific alarms for inclusion.  Only the alarms that match the profile will be reposted to the moogsoft_alarm subject and be forwarded to Moogsoft.

 

Additional Information

You may also choose to check the box for "Clear" severity so that alarm clear messages would also be sent to Moogsoft.

Keep in mind that this means ALL Clear events will be sent to Moogsoft, even those which correspond with alarms that were not previously sent.  

In other words, if you check the boxes for Major, Critical, and Clear, then you will get Clear alarms sent to Moogsoft which correspond with Minor/Warning alarms that were not sent to Moogsoft.