6.1.6 Incident reduction

NNMi provides the following customizable correlations for reducing the number of incidents that network operators see on the NNMi console:

• Pairwise correlation

  Logically related incidents that need not be displayed in the Incident view (such as CiscoLinkUp following CiscoLinkDown) are managed as related incidents. Specifically, when an interface changes from LinkDown to LinkUp, the corresponding LinkDown and LinkUp messages are suppressed.

• Deduplication correlation

  When multiple copies of an incident are received within the specified time window, correlate the duplicates under a deduplication incident. The time window restarts for each newly received duplicate incident. In this way, NNMi correlates the duplicate incidents until it has not received any duplicates for the entire duration of the correlation time window.

• Rate correlation

  When the specified number of copies on an incident are received within the specified time window, correlate the duplications under a rate incident. NNMi generates the rate incident when the specified number of incidents has been received, regardless of how much time remains in the time window.

To Page Top