10.1.9 Setting a threshold to suppress forwarding of large numbers of events
This section describes how to set up a threshold-based suppression of event-forwarding and how to check the forwarding status of each condition for the suppression of event-forwarding.
- Organization of this subsection
(1) Setting up the conditions for the suppression of event-forwarding
-
Edit the forwarding settings file (forward) on an agent whose event forwarding is to be automatically suppressed.
Specify the conditions for the suppression of event-forwarding in the JP1/Base forwarding settings file (forward) on the agent.
Format:
suppress identifier unit-time threshold check-count [destination (optional)] event-filter end-suppress
For details on the conditions for the suppression of event-forwarding, see Forwarding settings file in 16. Definition Files.
-
Apply the modification in the forwarding settings file (forward).
Reload the forwarding settings file (forward), or restart the event service to apply the changes.
If the JP1 event occurrence status matches the condition for the suppression of event-forwarding, event forwarding is automatically suppressed. If the problem is solved and the JP1 event occurrence status matches the stop condition for the suppression of event-forwarding, event forwarding is automatically restarted.
(2) Checking the forwarding status of each condition for the suppression of event-forwarding
To check the forwarding suppression status of each condition for the suppression of event-forwarding, execute the following command from the manager:
jevfwstat
For details on the jevfwstat command, see jevfwstat in 15. Commands.