I have a couple of situations where we might get either EIGRP or BGP up/down notifications from Cisco routers. These typically appear as events that come in as traps. I've got rules already that can create new events based on whether or not the message is an UP (generates 0xfff00022)or a DOWN (0xfff00021). I then have an EventSequence rule which looks for an UP after a DOWN within 300 seconds; if so, it generates a BOUNCE event (0xfff0002a). If not, I generate a DOWN event and set it as a MAJOR alarm. (we also then handle the up and clear).
Normally, I just Alarm the BOUNCE event as a minor (our paging rules don't send notifications on minor events). # BGP BOUNCED 0xfff0002a E 50 A 1,0xfff0002a Now, though, we have a requirement to set a MJOR alarm and page if we get multiple BOUNCE messages (FLAPPING) on the same device within a given period of time - say 3 in 5 minutes. I'm puzzled how to do this and retain the functionality we have now; An EventRateWindow rule would seem to handle the issue of generating the FLAPPING event, but is there any way to do that and still retain the BOUNCED capability without having the BOUNCED even generate a separate new event which I then track with EventRateWindow? According to the doc, it looks like the LowRateEventCode doesn't get generated unless it has already generated a high event . Thanks, Al _________________________ Almon (Al) Sorrell Global Business Solutions and Technology Services Corporate Network Services | Network Engineering Consultant T. Rowe Price 4515 Painters Mill Road, TE9008 Owings Mills, MD 21117 Phone: (410) 345-3042 Cell:(443) 527-2398 Fax:(410) 345-3135 Email: [email protected] T. Rowe Price (including T. Rowe Price Group, Inc. and its affiliates) and its associates do not provide legal or tax advice. Any tax-related discussion contained in this e-mail, including any attachments, is not intended or written to be used, and cannot be used, for the purpose of (i) avoiding any tax penalties or (ii) promoting, marketing, or recommending to any other party any transaction or matter addressed herein. Please consult your independent legal counsel and/or professional tax advisor regarding any legal or tax issues raised in this e-mail. The contents of this e-mail and any attachments are intended solely for the use of the named addressee(s) and may contain confidential and/or privileged information. Any unauthorized use, copying, disclosure, or distribution of the contents of this e-mail is strictly prohibited by the sender and may be unlawful. If you are not the intended recipient, please notify the sender immediately and delete this e-mail. --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
