Generate processes down for two consecutive checks

Document ID : KB000095863
Last Modified Date : 17/05/2018
Show Technical Document Details
Introduction:
Customer would like to send an alarm only after the given process has been checked and found to be down 2x (not on the first check of the of the process state)
Question:
How can I send an alarm only after the given process has been checked and found to be down 2x (and not alarm on the first check of the of the process 'down' state)?
Environment:
- UIM v8.5.1
- processes (any version)
- nas (any version)
Answer:
All incoming alarms that match would be set to invisible, hence the 2nd AO profile to set them to visible when the count is >= (gte) 2. This profile would run on an interval basis to ensure they remained visible.

Tips: You can try using processes probe out of the box default of 60 seconds and for the nas 2nd rule, "On every interval" of 2m. Or simply adjust both settings for the desired effect/timing.

Note: Stop the process to generate the alarm. Start the process to clear the alarm.
 
Nas AO profile 1:
 
Action type: set_visibility
Make event invisible
Action mode: On message arrival
Message string: /.*<process_name>.*/
Message Counter: Equals to 1
 
NOTE: You may have to adjust the processes check interval and the nas rule On Interval setting to make it practical. Maybe set the 'On interval' to slightly after the processes check interval for instance.


User-added image


Nas AO profile 2:
 
Action type: set_visibility
Make event visible
Action mode: On every interval
Message string: /.*<process_name>.*/
Message Counter: Greater than or equal 2


User-added image
 
Note that the Count continues to rise and the alarm remains until its cleared. You can test it by starting the given process again.
 
 
 
Additional Information:
Tips:
  • Use the nas GUI Status Tab/window to watch the alarms come in (invisible), then watch the alarms change to visible (when the count reaches 2.
  • If you set the process probe monitoring interval to 300 seconds, set the 'On every interval' value in the 2nd rule a bit higher such as 5 minutes (5m). 'On every interval is simply the interval you specify for when the rule should be run.