TECHZEN Zenoss User Community ARCHIVE  

Event Transforms Not Working

Subject: Event Transforms Not Working
Author: [Not Specified]
Posted: 2015-10-27 10:39

Guys;

I am using version 4.2.4

I put a couple transform in Events/Win/AD to drop alerts, however I am still getting alerted.

import re
if re.search('threshold of ldapBindTimeErr exceeded', evt.summary):
evt._action = 'drop'

import re
if re.search('threshold of ldapBindTimeWarn exceeded', evt.summary):
evt._action = 'drop'

import re
if re.search(' threshold of ldapBindTimeCrit exceeded', evt.summary):
evt._action = 'drop'

Do these transforms look okay If not can you assist me in correcting them.

Thanks Randy



Subject: Re: [Zenoss] Event Transforms Not Working
Author: [Not Specified]
Posted: 2015-10-27 11:55

I'm not really sure of re.search... but I would make an event class mapping using the GUI to /Ignore myself, that would then drop them... James Pulver CLASSE Computer Group Cornell University

Subject: Try:
Author: [Not Specified]
Posted: 2015-10-27 12:09

Try:

if evt.summary.find("threshold of ldapBindTimeErr exceeded") >= 0:
evt._action='drop'



Subject: Thanks. I will try the
Author: [Not Specified]
Posted: 2015-10-27 13:27

Thanks. I will try the suggestions



Subject: I tried the suggestions,
Author: [Not Specified]
Posted: 2015-10-27 13:53

I tried the suggestions, still getting the alerts



Subject: Maybe post screenshots of one
Author: [Not Specified]
Posted: 2015-10-27 13:59

Maybe post screenshots of one of your Events' details and the exact code in your transform. Otherwise we're flying blind.



Subject: <a href="http://www
Author: [Not Specified]
Posted: 2015-10-27 15:31

http://www.freeimagehosting.net/commercial-photography/illinois/chicago/... src="http://i.imgur.com/MvWJ9u3.png"



Subject: (No subject)
Author: [Not Specified]
Posted: 2015-10-27 15:36



Subject: Anyone can help me. I need
Author: [Not Specified]
Posted: 2015-10-28 08:50

Anyone can help me. I need to stop these alerts ASAP.

Thanks



Subject: Anyone can help me. I need
Author: [Not Specified]
Posted: 2015-10-28 08:53

Anyone can help me. I need to stop these alerts ASAP.

Thanks



Subject: ex:
Author: ValeruS
Posted: 2015-10-28 09:12

ex:

if evt.summary.startswith('snmp trap coldStart'):
evt._action = "drop"




Subject: Thanks Guys. I prefer to get
Author: [Not Specified]
Posted: 2015-10-28 09:37

Thanks Guys. I prefer to get the alerts; however I don't need to get an alert every 2 minutes when the threshold is exceeded, which is expected I have about 50 DC and getting these alerts when it really isn't a problem occurring. If it is a legit issue other services would be affected. You do make a good point.



Subject: Tried this. Still not
Author: [Not Specified]
Posted: 2015-10-29 08:08

Tried this. Still not working. Still getting the alerts.



Subject: MA
Author: [Not Specified]
Posted: 2015-10-29 10:17

MA

Subject: http://imageshack.com/a
Author: [Not Specified]
Posted: 2015-10-29 10:20

http://imageshack.com/a/img911/2784/CHZrri.png



Subject: You're missing the indents on
Author: [Not Specified]
Posted: 2015-10-29 10:51

You're missing the indents on the "drop" lines. It's python code you're writing in there, white space is important, unfortunately. And double unfortunately, this forum doesn't preserve the pythonish whitespace...



Subject: I that correct now?
Author: [Not Specified]
Posted: 2015-10-29 11:16

I that correct now

http://imageshack.com/a/img905/2600/JkU6bs.png

Thanks



Subject: I that correct now?
Author: [Not Specified]
Posted: 2015-10-29 11:16

I that correct now

http://imageshack.com/a/img905/2600/JkU6bs.png

Thanks



Subject: Thanks. You just taught me
Author: [Not Specified]
Posted: 2015-10-29 13:44

Thanks. You just taught me something.



< Previous
serviced-isvcs_elasticsearch-logstash container will not start
  Next
Dashboard site window portlet is blank
>