Hitachi

JP1 Version 12 JP1/SNMP System Observer Description, Operator's Guide and Reference


6.3.27 Event filter definition file (ssoevtfilter.conf)

In the event filter definition file, define whether to filter the incidents to be issued to NNMi. This definition file is used to prevent the issuance of unnecessary incidents.

When off is specified in the threshold-event or status-event key in the ssocolmng action definition file (ssocolmng.def) and ssoapmon action definition file (ssoapmon.def), incidents are not issued even if off is specified in the event filter definition file.

Organization of this subsection

(1) Format

The following shows the format of the event filter definition file.

[Figure]

(2) Description

The following table describes the content of the definition in the event filter definition file.

Key name

Value

incident-name#

<<off>>

Specify whether to filter the specified incident.

on: Filters the incident.

off: Does not filter the incident.

#: As incident-name, specify the incident name of an event SSO issues to NNMi. For incident names, see G.1 Events (incidents) that are issued by SSO.

(3) Example

The following is an example of defining the event filter definition file.

[Figure]

(4) Writing a definition in a field

The following describes how to write a definition in a field:

(5) Application of definitions

If you have changed the definition of an incident in the event filter definition file, you must execute the daemon process that notifies NNMi of the incident to re-read the definition file. The following table describes incidents, the daemon processes that require re-reading of the definition file, and the re-reading methods.

Table 6‒7: Daemon processes that require re-reading of the definition file in which definitions are changed

Event name

Incident name#

Daemon process requiring re-reading

Re-reading method

  • Collection status change event

  • Resource status change event

  • Database alert/maximum size excess event

Incident name beginning with SSO_Resource

ssocolmng

  • ssocolmng -r command

  • Restart the ssocolmng daemon process.

  • Monitoring status change event

  • Process status change event

  • Process and service monitoring failure event

Incident name beginning with SSO_Process

ssoapmon

  • ssoapcom -r command

  • Restart the ssoapmon daemon process.

Service status change event

Incident name beginning with SSO_Service

Application status change event

Incident name beginning with SSO_Application

#: For the official names of incident, see G.1 Events (incidents) that are issued by SSO.

(6) Incident not subject to event filtering

The table below describes the incident that is not subject to the filtering based on the event filter definition file. Even if the incident is defined in the event filter definition file, the definition is invalid, and the incident will be issued.

Table 6‒8: Incident not subject to event filtering

Category

Incident name

Description

Resource collection

SSO_Resource_DB_Size_Warning

A threshold for a collection database was exceeded.

(7) Notes

Note the following when writing definitions in the event filter definition file: