Alarm browser events and correlation (big question)?????

[bigdan]

Hi guys,

platform Openview 6.1 on sun Solaris 2.6

I'm relatively new in HP Openview world and i would like to know if it's possible to:

->Display only standing alarm in the alarm browser excepted unacknowledge alarm with the severity NORMAL
ex: the alarm that we see in the alarm browser are still true (if you see node down the node is still down until the alarm is gone)

to do that I need to do:

1- correlation between node/if DOWN and UP
ex: i want to remove ,from the alarm browser, the alarm/event node down when the alarm/event node up is coming from the same node

2- an acknowledge alarm with the severity NORMAL is remove from the alarm browser


3- all alarm that have been removed have to be accessible for a history

Any help will be very appreciate

Thanks

Daniel

 

[MikeLacey]

Shouldn't be a problem:

1 - Add a Message Key to the "Down" message
(Message Conditions/Modify/Message Correlation)

This Key will be used by the "Up" message to acknowledge the "Down" message, so it needs to be unique, you can't use that key in any other message.

2 - Put the "Down" Message Key in the "Acknowledge Messages Matching This Message Key Pattern" field in the "Up" message Message Correlation screen.

The acknowledged messages go into History, they don't get deleted. Mike
michael.j.lacey@ntlworld.com
Email welcome if you're in a hurry or something -- but post in tek-tips as well please, and I will post my reply here as well.