H3C Technologies H3C Intelligent Management Center User Manual
Page 705
691
12.
To modify how many duplicate Syslog entries must be received before generating an alarm, enter
the new number of duplicate Syslog entries in the Repeat Times field.
13.
Select the alarm level that IMC applies to all Syslog entries that match this rule from the Alarm Level
list.
14.
In the Alarm Description field, enter a new string that matches some or all of the content in the
Syslog event description field that must be matched for this rule to generate an alarm in IMC.
15.
Do one of the following:
{
If you want to forward alarms generated by this rule to SCC, click the radio button to the left
of Yes in the Forward to SCC field.
{
If you do not want to forward Syslog events to SCC, click the radio button to the left of No in
the Forward to SCC field.
16.
Modify the Syslog template to be used with this rule clicking Select located to the right of the Syslog
Template field.
17.
Select the Syslog template you want to use from the list of existing Syslog templates displayed in
the Select dialog box.
18.
Click the radio button to the left of the Syslog template you want to apply to this rule.
If the Syslog template contains parameters, the Add Rule page updates to include a Param Setting
section that lets you configure parameter settings for the template to match parameter values in the
Syslog entry. IMC includes the following configuration options that determine how IMC counts
Syslog entries:
•
Count Type: Determines how IMC treats similar Syslog events with different parameter values.
19.
Select Summing Count if you want IMC to consider similar Syslog entries as one alarm without
distinguishing between different parameter values.
Alarms is generated when the number of matched Syslog entries, regardless of parameter values,
equals the number of Syslog entries configured in the Repeated Times field within the time
configured in Repeat Interval window.
20.
Select Classifying Count if you want IMC to consider similar Syslog entries with different parameter
values as separate alarms.
The Syslog entries with parameter values matching those configured in the Param Value fields is
counted. When the number of Syslog entries with matched Param Values equals the number
configured in the Repeated Times field within the time configured in the Repeat Interval window is
escalated to an alarm.
•
Count Parameter: click the checkbox to the left of the parameter name under Count Parameter if
you want IMC to match the value you define in the Param Value field to the right with the contents
of each Syslog entry.
•
Param Name: Contains the parameter name that IMC uses to match against the contents of Syslog
entries.
•
Param Value: Enter the value of the parameter that IMC uses to match against the contents of Syslog
entries in the Param Value field.
CAUTION:
If you input 'N/A' in the Param Value field, or you uncheck the checkbox for Count Parameter, IMC
evaluates Syslog entries by Count Type without evaluating the parameter values in the Syslog entries.
The following steps outline the configuration parameters for the alarm recovery or resolution
configuration for this rule.