Filtering alarms

Filters can be used to reduce the number of alarms received by the probe both during resynchronization and when the probe receives new events as they are generated.

The following table displays the attributes that you can use as a filter. For each attribute, the table shows the string to use in the filter property that corresponds to the attribute, which properties support the attribute, and the values to which you can set the attribute.

Table 1. Filters that can be used to reduce the alarms received by the probe

Attribute name

String to specify in the filter property that corresponds to the attribute

Filter property in which attribute supported

Supported values and their descriptions

ackState

$.filterable_data(n)

ResyncFilter

1 - Acknowledged

2 - Unacknowledged

perceivedSeverity

$.filterable_data(h)

ResyncFilter and SubscribeFilter

1 - Indeterminate

2 - Critical

3 - Major

4 - Minor

5 - Warning

6 - Cleared

probableCause

$.filterable_data(g)

ResyncFilter and SubscribeFilter

A valid value for this attribute is an integer that corresponds to its probable cause. For a full list of the probable causes that the probe supports, refer to the rules file.

alarmType

$.header.fixed_head.event_name

ResyncFilter and SubscribeFilter

x1 - Communications alarms

x2 - Processing errors alarms

x3 - Environmental alarms

x4 - Quality of service alarms

x5 - Equipment alarms

x6 - Integrity violations

x7 - Operational violations

x8 - Physical violations

x9 - Security service or mechanism violations

x10 - Time domain violations

Notification_type

$.header.fixed_head.type_name

SubscribeFilter

x1 - New alarms

x2 - Changed alarms

x3 - Alarms with acknowledged state changed

x5 - Cleared alarms

Object Instance

$.filterable_data(e)

SubscribeFilter

A valid value for this attribute is a string representing the name of the object.

Specifying a filter

You can specify a filter using the ResyncFilter and SubscribeFilter properties. Enter the filter in the following format:

attribute_name==value

You can specify that the probe uses more than one filtering criterion by separating each by AND or OR. For example, if you want the probe to receive all critical alarms that are unacknowledged, set the ResyncFilter property to the following value:

$.filterable_data(h)==2 AND $.filterable_data(n)==2