Getting duplicate alerts of a single alert from UIM into SOI

Document ID : KB000115744
Last Modified Date : 25/09/2018
Show Technical Document Details
Issue:
I am getting duplicate alerts of a single alerts in SOI console from UIM
UIM Duplicate Alerts
Environment:
SOI 4.2 UIM Connector & SOI Manager running in MS Cluster
Resolution:
There are 2 UIM Connectors installed on 2 windows machines and connecting to the same UIM Server and reporting to 2 SOI Managers.
1st Connector is working as expected without any duplicate alerts, the second connector is publishing duplicate alerts with different Source Alert ID values.

In general, the NIM ID in UIM should math with "Source Alert ID" in SOI Alert Console, but here the 2nd connector "Source Alert ID" values(format also) are completely different and they do not match with NIM ID in UIM. No Event enrichment policies deployed on either Manager or Connector.

In the process of troubleshooting, we enabled debug traces and recycled "CA Catalyst Container" services on the connector in the question, since then it stopped publishing duplicate alerts & Source Alert ID values does match with Nim ID values in UIM