0 Replies Latest reply on Jan 3, 2018 1:08 AM by Abhay Bhagat

    How to create the notification policy for Self Monitroing alarm when they become critical

    Abhay Bhagat

      Dear Experts,

       

      Query : How to set the Notification when the Self Monitoring alert becomes CRITICAL after 5 min via Notification policy ? Is it possible

       

      Explanation of issues :-

      In TSIM whenever agents disconnects from ISH(agent controller ) it generates an alert call with Origin class   PROACTIVENET_SLFMON_COMPONENT (Self monitoring alerts) which is of OK severity .

       

      and per MRL  ppm_sm_ev_rules.mrl in cell the below rule applies on the same it becomes critical after 300 seconds ( 5min ) .

       

      I placed a notification policy with criteria that if the alert comes as CRITICAL sent the notification but it does not works .

       

      Any one had faced this error or has any suggestion for me please share

       

      MRL , notification policy and .load file details in trail

       

       

      ##########################################################################################################################

      #  The followig two rules delay CRITICAL state of PATROL Agent Disconnect events from Agent Controller.

      #  Default delay is 5 minutes (300 seconds)

      ###########################################################################################################################

       

       

      new set_timer_pa_disc_to_crit : PPM_SM_EV($EV)

      where [ $EV.status != CLOSED AND

      $EV.mc_origin_class equals PROACTIVENET_SLFMON_COMPONENT AND

      $EV.severity equals OK AND

      $EV.mc_object has_prefix 'PA:' AND

      $EV.msg has_suffix localize(kb,[patrol_agent_disconnect]) ]

      triggers

      {

      set_timer($EV, 300, PATROL_SM_TO_CRITICAL);

      }

      END

       

       

      timer inc_pa_disc_to_crit : PPM_SM_EV($EV)

      where [ $EV.status != CLOSED AND

      $EV.mc_origin_class equals PROACTIVENET_SLFMON_COMPONENT AND

      $EV.severity equals OK AND

      $EV.mc_object has_prefix 'PA:' AND

      $EV.msg has_suffix localize(kb,[patrol_agent_disconnect]) ]

      timer_info: == PATROL_SM_TO_CRITICAL

      {

      $EV.severity = CRITICAL;

      $EV.mc_priority = PRIORITY_1;

      }

      END

       

      ##################################################

      SELECTOR;

       

       

      data_handle=599929;

       

       

      mc_udid='mc.pncell_BTOM-IM2.1a23d565.1';

       

       

      mc_creation_time=1512297829;

       

       

      mc_modification_time=1514117161;

       

       

      mc_modification_request_time=1514117161;

       

       

      mc_modification_requestor='admin';

       

       

      mc_bad_slot_names=[];

       

       

      mc_bad_slot_values=[];

       

       

      publish_env_id='';

       

       

      mc_associations=[];

       

       

      based_on='PPM_SM_EV';

       

       

      name='btom_Self_Monitoring_Alarms';

       

       

      description='';

       

       

      ecfs=['PPM_SM_EV($EV) where [$EV.severity equals CRITICAL ]'];

       

       

      ecfs_descr=['Self Monitroing Events '];

       

       

      END

       

       

       

       

       

       

       

       

       

       

      IM_NOTIFICATION_POLICY;

       

       

      data_handle=655945;

       

       

      mc_udid='mc.pncell_BTOM-IM2.1a3f980a.1';

       

       

      mc_creation_time=1514117130;

       

       

      mc_modification_time=1514117130;

       

       

      mc_modification_request_time=1514117130;

       

       

      mc_modification_requestor='admin';

       

       

      mc_bad_slot_names=[];

       

       

      mc_bad_slot_values=[];

       

       

      publish_env_id='';

       

       

      mc_associations=[];

       

       

      name='_Self_Monitoring_Alarms_notifications';

       

       

      description='';

       

       

      enabled=1;

       

       

      active_timeframes=[];

       

       

      except_timeframes=[];

       

       

      active_global_timeframes=[];

       

       

      except_global_timeframes=[];

       

       

      selector_name='btom_Self_Monitoring_Alarms';

       

       

      selector_class='PPM_SM_EV';

       

       

      selector_ecf=*btom_Self_Monitoring_Alarms ($EV);

       

       

      ordinal=0;

       

       

      during_schedule=YES;

       

       

      notification_service='BASIC_EMAIL';

       

       

      notify_targets=['abc@ABC.com.kw'];

       

       

      notify_source='';

       

       

      notify_subject_format='BTOM Self Monitoring Notification %s   %s %s';

       

       

      notify_subject_slots=['$1.mc_host','$1.msg','$1.status'];

       

       

      notify_on_operations=[];

       

       

      notify_msg_format='Host = %s

       

       

      Message =  %s

       

       

      Object = %s

       

       

      Object Class = %s

       

       

      Paramter Threshold =%s

       

       

      Paramater = %s

       

       

      Parameter Value = %s

       

       

      Staus = %s

       

       

       

       

       

       

       

       

       

       

      This is an alert generated from notification policy from  BTIM ,

       

       

      These alerts are related to Self monitoring events generated by application in case of failure connection with Patrol Agents etc

       

       

       

       

       

       

      notify_msg_slots=['$1.mc_host','$1.msg','$1.mc_object','$1.mc_object_class','$1.mc_parameter_threshold','$1.mc_parameter','$1.mc_parameter_value','$1.status'];

       

       

      auto_ack=0;

       

       

      auto_assign=0;

       

       

      assign_to_user='';

       

       

      date_format='%c';

       

       

      when_slot='status';

       

       

      when_operator='greater_or_equals';

       

       

      when_value='OPEN';

       

       

      from_operator='';

       

       

      from_value='';

       

       

      change_only=NO;

       

       

      END

       

      #######################

      .load file details

       

      im_internal

      patrol_enrich

      mc_intevt

      impact_admin_server

      ips

      mc_sm_start

      mc_sm_associate

      mc_ci_policies

      mc_sm_maintenance

      mc_sm_elect

      mc_sm_attach

      mc_sm_shadow

      mc_sm_slm

      admin_propagate

      apm_incident

      mcxp

      patrol_portal

      ppm_propagate

      ppm_sm_ev_rules