12.1.7 Considerations for suppressing the forwarding of a large number of events
If a large number of events occur on an agent, and the system monitoring by the manager is thereby hindered, consider whether to suppress event forwarding from the agent.
Consider the following points for suppressing the forwarding of a large number of events:
-
Suppressing the forwarding of a large number of events
-
Preventing the forwarding of a large number of events
- Organization of this subsection
(1) Considerations for suppressing the forwarding of a large number of events
When a large number of events have occurred on an agent, first consider whether to use the suppression of repeated-event monitoring and whether to suppress the event forwarding from the agent. If you want to reduce the load on the event server of the manager, suppress the event forwarding from the agent. The event forwarding suppression command (jevagtfw command) enables you to suppress the event forwarding from the agent by an operation from the manager.
If a log file trap issuing JP1 events has caused the occurrence of a large number of events, consider whether to stop the log file trap. You can stop log file traps individually by using the ID number or log file trap name of each log file trap.
Examine how JP1 events are occurring to determine which of suppressing event forwarding and stopping log file traps is to be used as a measure against the occurrence of a large number of events. For example, when an occurrence of a large number of events is detected, suppress event forwarding as a temporary measure. After that, if you find that a log file trap has caused the occurrence of a large number of events, you can stop the log file trap and release event forwarding from suppression.
- Note
-
Storage of JP1 events in the event server
When event forwarding from an agent is suppressed, only forwarding of events to the manager is suppressed, and JP1 events are stored in the event server of the agent. On the other hand, when a log file trap is stopped, event conversion to JP1 events is also stopped, and, accordingly, JP1 events are not stored in the event server of the agent.
(2) Considerations for preventing the forwarding of a large number of events
To prevent a large number of events from being forwarded, consider the automatic suppression of event forwarding by using a threshold for determining the occurrence of a large number of events.
To automatically suppress event forwarding, you need to consider the event forwarding suppression condition. The event forwarding suppression condition includes the setting of the number of occurring events per unit time.
For details about the event forwarding suppression condition, see descriptions of the forwarding setting file in the JP1/Integrated Management 2 - Manager Administration Guide.