Disable specific messages in the dns_response probe

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

The dns_response probe may generate alert messages that are not required for your monitoring environment, such as LookupFailure or ParseError. This article explains how to suppress these specific messages either globally within the probe or selectively using the Network Alarm Subsystem (NAS) probe.

Environment

• DX Unified Infrastructure Management (UIM) 24.3.*
• dns_response probe (all versions)

Cause

The dns_response probe is configured by default to alert on all detected issues, including lookup failures and parse errors, which may not be actionable in some environments.

Resolution

Approach 1: Change the Message Severity (Global Probe Level) This is the most direct way to stop the dns_response probe from alerting on failures globally.

1. Open the dns_response probe configuration in Infrastructure Manager (IM).
2. Click the Message Pool Manager button on the top toolbar.
3. Locate the relevant message token (e.g., LookupFailure or ParseError) in the list and click Edit.
4. Change the Error Severity from its default state to Clear or Information.
5. Click OK and Apply.
   • Note: By setting the severity to Clear, the probe still generates the event internally, but the UIM alarm system instantly ignores it as a closed/benign event.

Approach 2: Use an Exclusion Rule (NAS Probe Level) Use this method if you only need to drop the message for specific servers, domains, or environments.

1. Open the nas (Network Alarm Subsystem) probe configuration.
2. Navigate to the Pre-processing Rules tab and create a new rule.
3. Set the Action Type to Exclude.
4. Set the NMS Probe Name field to dns_response.
5. Set the Message String field using regex to match the exact failure text (e.g., /.LookupFailure./).
6. Save and apply the configuration.
   • The nas probe will intercept and silently drop these specific messages before they reach the Operator Console or database.