6.10.3 Handling the occurrence of a large number of events by suppressing event forwarding from an agent

(1) Suppressing, on the manager, event forwarding from the agent on which a large numbers of events occurred

Using a command button that was set up, you can suppress, on the manager, event forwarding from an agent.

1. In the events list in the Event Console window, make sure that a large number of JP1 events are being output from a specific agent.

2. Select the JP1 events being forwarded from the agent that you wish to suppress.

3. Click the Execute Command button to display the Execute Command window.

4. Click the All supp command button that was set up in 6.10.2 Preparing to suppress event forwarding from an agent.

   The Preview Command Execution Content window opens. Check the content of the command to be executed (especially the name of the host to be suppressed).

   

5. In the Preview Command Execution Content window, click the Execute button to execute the jevagtfw command.

   Event forwarding from the specified agent is suppressed.

   In the Log area of the Execute Command window, you can check the execution result of the command.

   

6. Identify the reason why a large number of events are occurring, and then solve the problem.

   While event forwarding is suppressed, investigate the agent that is outputting the events, and then solve the problem.

To Page Top

(2) Checking the suppression status of event forwarding from the agent

Using a command button that was set up, you can, on the manager, check the suppression status of event forwarding from an agent.

1. In the Event Console window, click the command button.

   The Execute Command window opens.

2. Click the Chk supp command button that was set up in 6.10.2 Preparing to suppress event forwarding from an agent.

   The Preview Command Execution Content window opens. Check the content of the command to be executed.

   

3. In the Preview Command Execution Content window, click the Execute button to execute the jevagtfw command.

   In the Log area of the Execute Command window, check the suppression status.

   You can check the execution result of the command in the Log area of the Execute Command window.

   

To Page Top

(3) Canceling suppression of event forwarding from the agent

Using a command button that was set up, you can, on the manager, cancel suppression of event forwarding from an agent.

1. In the Event Console window, among the JP1 events whose forwarding from the agent was suppressed, select those for which you want to cancel suppression.

2. Click the Execute Command button to display the Execute Command window.

3. Click the Cns supp command button that was set up in 6.10.2 Preparing to suppress event forwarding from an agent.

   The Preview Command Execution Content window opens. Check the content of the command to be executed (especially the name of the host to be released from suppression).

   

4. In the Preview Command Execution Content window, click the Execute button to execute the jevagtfw command.

   Suppression of event forwarding from the specified agent is canceled.

   In the Log area of the Execute Command window, you can check the execution result of the command.

   

5. Also in the Event Console window, confirm that suppression has been canceled and that events are being forwarded from the specified agent.

   

To Page Top

(4) Reviewing the setting for event forwarding from the agent

As a measure to prevent a large number of events from recurring, you can analyze the situation under which the recent large number of events occurred and set a threshold for suppressing automatic forwarding of events.

Analyze the situation under which the events occurred from the following viewpoints:

• If, the next time there is a large number of events, they need to be filtered, what kind of filtering condition is appropriate?

• How many events occurred within a set time period (for example, 60 seconds)?

• Are large numbers of events occurring continuously?

Based on the results of analyses carried out from these viewpoints, set the event forwarding condition (which is equivalent to the threshold for frequently occurring events) in the forwarding settings file of JP1/Base on the agent. For details about the setting procedure, see 6.10.5 Setting a threshold for automatically suppressing event forwarding on an agent.

To Page Top

(5) Checking the events that are suppressed from being forwarded

When you suppress event forwarding from an agent on which a large number of events have occurred, important events that need to be forwarded from the agent to the manager might not be forwarded. Therefore, search the relevant agent's event database from JP1/IM - View and check the events that occurred while forwarding was suppressed. For details about how to search for JP1 events, see 6.8 Searching for JP1 events.

To Page Top