Hi Frank My understanding is that the first time ffffffff comes in the rule is triggered. If a 2nd ffffffff comes in within 600 seconds then it closes off the 1st instance of the rule and triggers a new instance. If the at any time a ffffffff does not occur within 600 seconds of the previous ffffffff then the fffffff1 alarm is triggered.
Best I can say is to try it and see if it works. If you wanted to get clever it should also be possible to have the ffffffff event clear any fffffff1 alarms. That way when Notifier restarts the alarm is automatically cleared. John -----Original Message----- From: Wagner, Frank <[EMAIL PROTECTED]> To: spectrum <[email protected]> Sent: Thu Oct 09 07:05:19 2008 Subject: AW: [spectrum] Monitoring AlarmNotifier Hi John, but doesn't an event pair start when it detects the first event and alarm, when the second dont come. if 1.Event comes and 2.Event comes, or don't then the rule is fine it is OK. but do I get an Alarm when 3.Event newer comes ? In my opinion the pair never Starts? Frank ________________________________ Von: John O'Mahony [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 9. Oktober 2008 00:50 An: spectrum Betreff: RE: [spectrum] Monitoring AlarmNotifier Something like the following should work 0xffffffff R Aprisma.Eventpair, 0xffffffff, 0xfffffff1, 600 Of course fffffff1 needs to be defined as an alarm. John ________________________________ From: Wagner, Frank [mailto:[EMAIL PROTECTED] Sent: 08 October 2008 21:24 To: spectrum Subject: AW: [spectrum] Monitoring AlarmNotifier Hi All, What would be the eventrule to generate an alarm (fffffff1) if an event (ffffffff) is not generated in 10 Minutes. I can not find the right rule for eventDisp. Thank you Frank ________________________________ Von: John O'Mahony [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 8. Oktober 2008 17:21 An: spectrum Betreff: RE: [spectrum] Monitoring AlarmNotifier And what if the AlarmNotifier process is up but has stopped processing alarms ... a not uncommon occurrence with Notifier :-( A more complete solution would be to create a 'heartbeat' alarm - a scheduled CLI script will do the job - that is processed by Notifier. This could be passed to a 3rd party app which would need to be able to flag an alarm if the heartbeat is not received in a set timeframe. We have a customer doing this where NSM is the 3rd party app. Thinking it through there is no reason the 'heartbeat' alarm couldn't be used to create an event in Spectrum from Notifier. This would need a change to the SetScript to process the heartbeat separate from other alarms but that shouldn't be too difficult. You would then need to create an event rule that will create an alarm when the event is not seen in a set timeframe. John ________________________________ From: F J Rutcho [mailto:[EMAIL PROTECTED] Sent: 08 October 2008 14:55 To: spectrum Subject: RE: [spectrum] Monitoring AlarmNotifier The best way to accomplish this would be to create a model (e.g., Host_Device if a windows box) that represents the SpectroSERVER. Name it simply "SpectroSERVER". Then go to the System Resources > Running Processes and create a monitor point for the AlarmNotifier process. Voila! If it stops running, an alarm will be generated against the SpectroSERVER model identifying the name of the process that stopped. It couldn't be easier than that! ________________________________ > Date: Wed, 8 Oct 2008 09:18:16 -0400 > From: [EMAIL PROTECTED] > To: [email protected] > Subject: [spectrum] Monitoring AlarmNotifier > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I had an interesting issue where AlarmNotifier didn't start after our > SpectroSERVER rebooted, and our email/phone/paging system which relies > on Set and Clear scripts to work we rendered inoperable for about 3 > weeks until we noticed it. AlarmNotifier is set to automatically start > at boot time, but it evidently failed to start 3 times (which is the max > set in the AlarmNotifieri.idb in the partslist folder). Is there a way > to monitor whether this process is running or not, and then maybe have > it throw an alarm up to Spectrum? What's the best way to do this? > > Thanks in advance guys. > > - -- > Brett Davis > IT Network and Security Operations > Cisco Certified Network Associate (CCNA) > Purdue University > YONG 605 > Phone (765) 49-62304 > [EMAIL PROTECTED] > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.8 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkjssxgACgkQ+j4RojbPFmA6YACgmZG0KziBYk59aQVtLVUcblD7 > seUAoJZPXDJa/ZH0TZDvsVkRz5Ln9SPw > =sjW/ > -----END PGP SIGNATURE----- ________________________________ Get more out of the Web. Learn 10 hidden secrets of Windows Live. Learn Now <http://windowslive.com/connect/post/jamiethomson.spaces.live.com-Blog-cns!550F681DAD532637!5295.entry?ocid=TXT_TAGLM_WL_getmore_092008> * --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED] * --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED] * --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED] * --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED] * --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED] --- To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body: unsubscribe spectrum [EMAIL PROTECTED]
