![]() |
![]() |
Subject: | Event Transforms Not Working |
Author: | [Not Specified] |
Posted: | 2015-10-27 10:39 |
Guys;
I am using version 4.2.4
I put a couple transform in Events/Win/AD to drop alerts, however I am still getting alerted.
import re
if re.search('threshold of ldapBindTimeErr exceeded', evt.summary):
evt._action = 'drop'
import re
if re.search('threshold of ldapBindTimeWarn exceeded', evt.summary):
evt._action = 'drop'
import re
if re.search(' threshold of ldapBindTimeCrit exceeded', evt.summary):
evt._action = 'drop'
Do these transforms look okay If not can you assist me in correcting them.
Thanks Randy
Subject: | Re: [Zenoss] Event Transforms Not Working |
Author: | [Not Specified] |
Posted: | 2015-10-27 11:55 |
Subject: | Try: |
Author: | [Not Specified] |
Posted: | 2015-10-27 12:09 |
Try:
if evt.summary.find("threshold of ldapBindTimeErr exceeded") >= 0:
evt._action='drop'
Subject: | Thanks. I will try the |
Author: | [Not Specified] |
Posted: | 2015-10-27 13:27 |
Thanks. I will try the suggestions
Subject: | I tried the suggestions, |
Author: | [Not Specified] |
Posted: | 2015-10-27 13:53 |
I tried the suggestions, still getting the alerts
Subject: | Maybe post screenshots of one |
Author: | [Not Specified] |
Posted: | 2015-10-27 13:59 |
Maybe post screenshots of one of your Events' details and the exact code in your transform. Otherwise we're flying blind.
Subject: | <a href="http://www |
Author: | [Not Specified] |
Posted: | 2015-10-27 15:31 |
http://www.freeimagehosting.net/commercial-photography/illinois/chicago/... src="http://i.imgur.com/MvWJ9u3.png"
Subject: | (No subject) |
Author: | [Not Specified] |
Posted: | 2015-10-27 15:36 |
Subject: | Anyone can help me. I need |
Author: | [Not Specified] |
Posted: | 2015-10-28 08:50 |
Anyone can help me. I need to stop these alerts ASAP.
Thanks
Subject: | Anyone can help me. I need |
Author: | [Not Specified] |
Posted: | 2015-10-28 08:53 |
Anyone can help me. I need to stop these alerts ASAP.
Thanks
Subject: | ex: |
Author: | ValeruS |
Posted: | 2015-10-28 09:12 |
ex:
if evt.summary.startswith('snmp trap coldStart'):
evt._action = "drop"
Subject: | Thanks Guys. I prefer to get |
Author: | [Not Specified] |
Posted: | 2015-10-28 09:37 |
Thanks Guys. I prefer to get the alerts; however I don't need to get an alert every 2 minutes when the threshold is exceeded, which is expected I have about 50 DC and getting these alerts when it really isn't a problem occurring. If it is a legit issue other services would be affected. You do make a good point.
Subject: | Tried this. Still not |
Author: | [Not Specified] |
Posted: | 2015-10-29 08:08 |
Tried this. Still not working. Still getting the alerts.
Subject: | MA |
Author: | [Not Specified] |
Posted: | 2015-10-29 10:17 |
Subject: | http://imageshack.com/a |
Author: | [Not Specified] |
Posted: | 2015-10-29 10:20 |
http://imageshack.com/a/img911/2784/CHZrri.png
Subject: | You're missing the indents on |
Author: | [Not Specified] |
Posted: | 2015-10-29 10:51 |
You're missing the indents on the "drop" lines. It's python code you're writing in there, white space is important, unfortunately. And double unfortunately, this forum doesn't preserve the pythonish whitespace...
Subject: | I that correct now? |
Author: | [Not Specified] |
Posted: | 2015-10-29 11:16 |
I that correct now
http://imageshack.com/a/img905/2600/JkU6bs.png
Thanks
Subject: | I that correct now? |
Author: | [Not Specified] |
Posted: | 2015-10-29 11:16 |
I that correct now
http://imageshack.com/a/img905/2600/JkU6bs.png
Thanks
Subject: | Thanks. You just taught me |
Author: | [Not Specified] |
Posted: | 2015-10-29 13:44 |
Thanks. You just taught me something.
< |
Previous serviced-isvcs_elasticsearch-logstash container will not start |
Next Dashboard site window portlet is blank |
> |