I need help understanding Event Class Mappings... :-( There are several events that keep coming back in my Event Console; one example is the following:
Wmi communication failure during connect The event is mapped to the eventClass /Status/Wmi/Conn. Not sure why, but that's where it ends up (this is a fresh install of 2.2.3 on openSuSE 10.3). I have learned that I can take events that come in as /Unknown and map them to a new class, which then allows me to modify the zProperties of the class to - for example - drop the events. But how do I set up an event that is already mapped to an eventClass to do that??? I would like the event mentioned above to be dropped, but I don't want to set the zProperties of /Status/Wmi/Conn to drop EVERYTHING, so within that class I created an EventClass Mapping. I called it WMICommunicationFailed and set up the Regex field to contain the error message, then the zProperties to drop those events. No worky! I've read Michael Badger's book (great book!) but didn't quite understand how to do what I've described. Any help would be greatly appreciated! Thanks! Jacques [/i] -------------------- m2f -------------------- Read this topic online here: http://forums.zenoss.com/viewtopic.php?p=25407#25407 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
