Suppressing Specific BGP peers
There's been a number of times where we have come across customers who have BGP peers that are not in use or sporadically in use, but they do not wish to remove it from their configs. As a result we get perpetual alerts, but we cannot suppress them as the event suppressed would prevent all bgp peers from alerting. Anyone have thoughts on some ways to single out peers that can be ignored on a per device level? Side note: We are using Powerflow and ServiceNow so we can possibly do something in the path as well. ServiceNow could take care of it, but doesn't help with the peers that flap.117Views2likes2CommentsStorage Monitoring
Good afternoon We are looking at event tuning within SL1 and are wanting to have different thresholds based on the drive, so for example with our file servers we are looking to tune the events so that if the c: drive is over 90% full it logs a minor and if it is over 95% it logs a major for the device. But then with the shared drives we would want them to alert at as 96% and 98%, as they are larger drives. Does anyone know if this is possible and how it would be set up, as from what we can see you can only have a set threshold for every disk Thank YouSolved33Views1like4CommentsTrap Threshold in a Event Policy
Hello SL community, I'm trying to create some events based on traps received. Some of the policies require a threshold to match an event. For example, the "tempOfSensor:" string should trigger a Critical event if the value is between 60 and 65. Is there a way to include a range of values in a trap-based alert, using either the result of an OID or a value inside that trap? Something similar to what we can do with a Dynamic Event Source.Solved69Views1like2CommentsHow do I format detailed Email Message from an Alert Formula
Hello ALL I have the following formula for an unhealthy alert object: result('o_31218', label="DataGuard is o_31218 logs behind in following Env: PrimaryDB:o_31214 SecondaryDB: o_31215 LastLogRec: o_31217 Difference: o_31218 ") >= 0 How can I get the Subject to contain object o_31214 and the body of the email to display what is listed in the above Policy Formula with the objects replaced with actual values ?Solved69Views1like2CommentsSuppress a syslog event on a specific interface
How might one go about suppressing a syslog event for a specific interface, but still receive all other events for that device and interface? For example, you have a syslog event message like: 5238379<187>267450: LC/0/1/CPU0:Aug 20 17:38:21.939 EDT: ifmgr[214]: %PKT_INFRA-LINK-3-UPDOWN : Interface TenGigE0/1/1/7, changed state to Down Your existing event policy uses regex match logic as follows: First Regular Expression: PKT_INFRA-LINK-[35]+-[^\s]+ Second Regular Expression: to.*(DOWN|Down|down) Identifier Pattern: Interface\s+([^ ,]+) Identifier Format: Interface: %1 Would you modify the event policy in some way? Is there other levers/knobs to in the system to tinker with that might get you the desired result?Solved201Views1like4Comments