You can write a rule (New Phase) to autoclose Events, in case OK events are received in BPPM against those Event types.
Please can you tell me any example of this rule?
There are already rules that take care of self monitoring events, for examples, look in the ppm_sm_ev_rules.mrl in your cell's kb (the later TSIM 10.5 version has more rules than the previous versions).
I have the same problem. I tried to create Timeout Policy in CMA, which should to close selected events after a period of time, but it doesn't work. For example I would like to close event with class "Cell Action Result" (MC_CELL_ACTION_RESULT) and Message "Action performed on an event or data object" after 300 seconds.
For this Policy I prepared selector:
Cell Action Result MC_CELL_ACTION_RESULT($EV) where [$EV.mc_host equals 'pnetservvm1' AND $EV.severity equals MINOR AND $EV.msg hassubstring 'Action performed on an event or data object' ]
Besides I would like to close events with class "Cell Allowed Connect" (MC_CELL_ALLOWED_CONNECT) and Message "Client connection accepted" and events with class "Cell Desconnect" (MC_CELL_DISCONNECT) and Message "Client has been disconnected". I would like to close these events after few minutes.
For these Policies I prepared selectors:
Cell Allowed Connect MC_CELL_ALLOWED_CONNECT($EV) where [$EV.mc_host equals 'pnetservvm1' AND $EV.severity equals INFO AND $EV.msg hassubstring 'Client connection accepted' ] Cell Disconnect MC_CELL_DISCONNECT($EV) where [$EV.mc_host equals 'pnetservvm1' AND $EV.severity equals INFO AND $EV.msg hassubstring 'Client has been disconnected' ]
Why it doesn't work?