How to customize an event with Spectrum Condition Rule to exclude events from IP x.x.x.x

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

How to customize an event with Spectrum Condition Rule to exclude events from IP x.x.x.x

Environment

Release: Any
Component: SPCAEM - Events and Alarms

Resolution

An Event Condition can be created to generate an event which does not assert an alarm when coming from a particular IP Address. A Second event generated by other IP Addresses will still assert alarms.

Example:

If event 0xxxxx occurs, if (regexp({a 0x12d7f} {A 1.1.1.2}))  evaluates to TRUE, then generate event 0xyyyyy. else (default) evaluates to TRUE, then generate event 0xzzzzzzz.

 

Where 0x12d7f is Attribute ID of Network Address.

If it matches IP Address 1.1.1.2, it will generate event 0xyyyyyyy (Set this event to not generate alarm. If you wish, not store events in historical database). Otherwise, it will generate event 0xzzzzzzz (which will generate the alarm for other devices).

Screenshot examples:

 

 

 

 

 

Additional Information

Please reference the "Event Configuration" section of the documentation for more information.