Topic
4 replies Latest Post - ‏2012-12-07T06:17:57Z by PeterGWoodward
SystemAdmin
SystemAdmin
847 Posts
ACCEPTED ANSWER

Pinned topic ICMP Indeterminate alarms

‏2012-11-21T23:27:14Z |
Hello

I'm using the icmp agent on ITCAM

The summary of the alarm says:
Real Error: DVC Failed - Pings Complete: Timed Out

Which is correct since the ip is not responding from that server; however the Severity is Indeterminate (purple). Why this is happening? The alarm should be Critical according to the service level from that profile.

Here is a screenshot from that element on the TEPS and how am I seeing the alarm on the Event List.

Best regards!
Updated on 2012-12-07T06:17:57Z at 2012-12-07T06:17:57Z by PeterGWoodward
  • SystemAdmin
    SystemAdmin
    847 Posts
    ACCEPTED ANSWER

    Re: ICMP Indeterminate alarms

    ‏2012-11-21T23:29:14Z  in response to SystemAdmin
    Sorry I forgot to add the AEL screenshot
  • PeterGWoodward
    PeterGWoodward
    4 Posts
    ACCEPTED ANSWER

    Re: ICMP Indeterminate alarms

    ‏2012-11-22T03:24:12Z  in response to SystemAdmin
    Hello,

    I assume you are sending the ISM events to Omnibus via the bridge module. In this case the severity is determined by the rules files. Based on the summary you are seeing the default icmp.rules file should be setting the Omnibus severity to 5.

    Are you using custom rules files? In this case I would check to see that the @Severity token is being set correctly based on the result information.

    Regards
    • SystemAdmin
      SystemAdmin
      847 Posts
      ACCEPTED ANSWER

      Re: ICMP Indeterminate alarms

      ‏2012-11-22T18:08:34Z  in response to PeterGWoodward
      Hello Peter

      Yes, you are correct; we made some changes on the icmp.rules file, but we didn't chaged the Severity... perhaps I am missing something, so I'm attaching the file I hope you can give me a clue.

      Thank you!
      • PeterGWoodward
        PeterGWoodward
        4 Posts
        ACCEPTED ANSWER

        Re: ICMP Indeterminate alarms

        ‏2012-12-07T06:17:57Z  in response to SystemAdmin
        Looking at the modifications I don't see anything that would cause the severity to not be set correctly. Could you provided the full details for one of these events?