TECHZEN Zenoss User Community ARCHIVE  

Transformations - Alert then Archive (evt._action = "history")

Subject: Transformations - Alert then Archive (evt._action = "history")
Author: [Not Specified]
Posted: 2014-03-24 12:28

Zenoss 4.2.4
SP405 ZUP File February 26, 2014 (Current)
CentOS 6.5

Is there a way within a transformation (i.e. /zport/dmd/Events/Unknown/editEventClassTransform) to have an alert sent but also set evt._action = "history"

Maybe I should rephrase, is there a way to send an alert for an event and immediately Auto Archive the event as well

Cheers,
Clint



Subject: Alert then Archive
Author: [Not Specified]
Posted: 2014-04-01 09:40

If anyone has any idea on how to send a notification and then move the alert to history, Id love to hear it.



Subject: Alert then Archive
Author: [Not Specified]
Posted: 2014-04-08 09:20

Anyone



Subject: Take a look at this article,
Author: [Not Specified]
Posted: 2014-04-08 12:57

Take a look at this article, it's a little old but it will get you started: http://community.zenoss.org/docs/DOC-3923

Keyword: Auto-Clear Correlation

Hydruid



Subject: Thanx for the Reply
Author: [Not Specified]
Posted: 2014-04-08 15:01

Hydruid,

Again, here as well, thanx for the input. This is kind of an interesting thought, create an event manually to clear an event. I was hoping for something inside a transformation like:

notification.send(evt)
evt._action = "history"

Truthfully, Im not quite sure how to program your idea. Please let me know if Im following your logic correctly:

1) Typical event comes in
2) Dont set evt._action = "history" in the transformation
3) Notification gets sent by Zenoss
4) Manually create an event to close the original event

In the above scenario you are proposing I dont know how step 4 would be aware of any events Are you suggesting some type of scheduled task Setting a custom property somewhere for the events you want to have closed so the process would have some type of key to use

I guess if there was a custom property on an alert (i.e. autoclose=true) I could enumerate all open alerts every x minutes and create events to close the events.

Any thoughts

Cheers,
Clint



Subject: The issue is that the
Author: [Not Specified]
Posted: 2014-04-11 15:05

The issue is that the triggers don't have an option (at least that I could find) for events that are in history, there are only options for "active" events.

Perhaps you could achieve this by using a "command" notification instead of a transform. There is an option for a command and a clear command. I have no experience with this but it looks like it might be a valid option.

It also looks like the command notification would be an easy way for you to also fix your email issues with MIME and etc., basically you could build your own scripts locally to do it the way you want, instead of how it is now.

Hydruid



< Previous
Notifications - Set Mail and MIME Header Field: Importance (i.e. High, normal, o ...
  Next
How to change interface speed
>