The Trap Director "Alert forwarding queue length" in the "Trap Management" subview is increasing causing trap processing to be delayed. The root cause is a communication issue between the Trap Director system and the other SpectroSERVER systems in the Distributed (DSS) environment. If Trap Director is not able to communicate with a Landscape then it will flush the entire Trap Director cache causing it to have to be rebuilt from scratch. If traps are coming in often enough, this will cause the Trap Director cache to be constantly flushed and rebuilt causing a backlog in the alert forwarding queue.
Release: Any
Component:
Edit the $SPECROOT/SS/.vnmrc file on the Trap Director system and add the following parameter then restart the SpectroSERVER process:
alert_forwarding_connect_full_flush=false
With the above parameter in place, when Trap Director is unable to communicate with a SpectroSERVER system in the DSS, it will only flush the Trap Director cache for that Landscape not the entire Trap Director cache.