---

Subject:	RE: process management for "ethereal" processes
Author:	Jane Curry
Posted:	2018-08-06 06:40

The /Status/OSProcess event generated when a process disappears is not easily customizable.  Do you really want to suppress the event or do you generate a notification (email, perhaps?) that you want to suppress?  If the latter, then it is easy enough in the notification to set a delay on the notification so if you set it to a bit over 3 minutes (the default polling interval for zenprocess) then, if the process comes back up in that time, then the notification won't happen.

If you really want to manipulate the /Status/OSProcess events, try looking at http://wiki.zenoss.org/Transforms_-_Escalate_by_Count   for a sample transform that manipulates events based on a count.  At the end of that sample, you could check the existing_count and if it is only 1 then you might drop the event or set its severity to info.

Cheers,
Jane

------------------------------
Jane Curry
Skills 1st United Kingdom
jane.curry@skills-1st.co.uk
------------------------------