Administer > Configure Incidents > Configure SNMP Trap Incidents > SNMP Trap Configuration Form > Configure Interface Settings for an SNMP Trap Incident > Configure Incident Suppression Settings for an Interface Group (SNMP Trap Incident)

Configure Incident Suppression Settings for an Interface Group (SNMP Trap Incident)

[This is the Context-Sensitive Help topic for the Incident Config: Suppress Tab for all Incident Configurations.]

Note Interface Settings override any other Suppression settings for this incident, including those from the Node Settings tab.

NNMi enables you to suppress a specified incident configuration based on the Source Object's participation in an Interface Group. When an incident is suppressed:

  • It is not stored in the NNMi database
  • It does not appear in an incident view in the NNMi console

You can also suppress the incident configuration based on either of the following:

Tip See Create Interface Groups for more information about Interface Groups.

For information about each Interface Settings tab: Concept Link IconSee Also

To suppress an incident configuration based on an Interface Group:

  1. Navigate to the Interface Settings tab.
  2. Do one of the following:

    1. To create a new configuration, click the  New icon.
    2. To edit an existing configuration, select a row, and click the  Open icon.
  3. Make sure you configure the basic Interface Setting behavior. See Configure Interface Settings for an SNMP Trap Incident  for more information.
  1. Select the Suppression tab.
  2. Configure the desired Suppression behavior (see table).
  3. Click  Save and Close to save your changes and return to the previous form.
Interface Settings Suppression Attributes
Name Description
Enabled

Use this attribute to temporarily disable an incident's suppression settings for the specified Interface Group:

Disable  = Temporarily disable the selected configuration.

Enable  = Enable the selected configuration.

Payload Filter

[ This Snippet contains a table with a hard-coded column width <col style="width: 77px;" /> on the first column. Do not remove the setting. ]

The Payload Filter Editor enables you to create expressions that further refine the filters used to select the incidents to be suppressed, enriched, or dampened. Make sure to design any complex Payload Filters offline as a Boolean expression first. This method can help to minimize errors when entering your expressions using the Payload Filter editor.

When creating a Payload Filter, note the following:

  • Payload Filter expressions for the like and not like operators use the syntax defined for java regular expressions (java.util.regex Pattern class).
  • You must use a ciaName that already exists in the trap or event you are configuring.
  • Each set of expressions associated with a Boolean Operator is treated as if it were enclosed in parentheses and evaluated together.
  • View the expression displayed under Filter String to see the logic of the expression as it is created.
  • The AND and OR Boolean Operators must contain at least two expressions as shown in the example below.

    The following example filters incidents on voltage state:

    AND
        ciaName = .1.3.6.1.4.1.9.9.13.1.2.1.7
        ciaValue = 5

    NNMi evaluates the expression above as follows:

    (ciaName = .1.3.6.1.4.1.9.9.13.1.2.1.7 AND ciaValue = 5)

    NNMi finds all incidents with a varbind .1.3.6.1.4.1.9.9.13.1.2.1.7 value of 5.

    Note When you use ciaName and ciaValue in a Payload Filter, you must enter the ciaName and ciaValue as a pair as shown in the preceding example.

  • The placement of your cursor and the subsequent text that is selected is important when performing operations using the Payload Filter Editor. For example, you append to, replace, or change the indentation of the expression that is selected.
  • The placement of your cursor and the subsequent text that is selected is especially important when adding your Boolean operators.
  • You can include more than one varbind in the same Payload Filter expression as shown in the following example:

    ((ciaName like \Q.1.3.6.1.4.1.9.9\E.* AND ciaValue = 25) AND (ciaName like \Q.1.3.6.1.2.1.2.2.1.1.3\E.* AND ciaValue = 3))

    In this example, a given trap must meet each of the following criteria:

    • Contain a varbind whose Object Identifier (OID) matches the regular expression \Q.1.3.6.1.4.1.9.9\E.* and has a value of 25.
    • Contain a varbind whose OID matches the regular expression \Q.1.3.6.1.2.1.2.2.1.1.3\E.* and has a value of 3.
Payload Filter Editor Settings
Attribute Description
Attribute

The attribute name on which NNMi searches. Filterable attributes include the following:

  • ciaName
  • ciaValue

Note When you use ciaName and ciaValue in a Payload Filter, you must enter the ciaName and ciaValue as a pair. For example: (ciaName =.1.3.6.1.4.1.9.9.13.1.2.1.7 ) AND ( (ciaValue = 4) OR ( ciaValue = 5)) is not supported.

Operator

Valid operators are described below.

Value

The value for which you want NNMi to search.

Note the following:

  • The values you enter are case sensitive.

  • NNMi displays a variable number of value fields depending on the Operator selected. For example, the between Operator causes two value fields to be displayed.
  • The between, in and not in operators require that each value be entered on a separate line.
Payload Filter Editor Buttons
Button Description
Append Appends the current expression (Attribute, Operator,and Value) to the selected expression already included in the filter string.
Insert Inserts the current expression (Attribute, Operator,and Value) in front of the cursor location within the Filter String.
Replace Replaces the selected expression with the expression displayed in the Attribute, Operator, and Value fields.
AND

Inserts the AND Boolean Operator in the selected cursor location.

Note View the expression displayed under Filter String to see the logic of the expression as it is created.

OR

Inserts the OR Boolean Operator in the current cursor location.

Note View the expression displayed under Filter String to see the logic of the expression as it is created.

NOT

Can be used in any part of the Filter String to specify that NNMi should exclude interfaces with values that pass the expression that immediately follows the NOT.

For example, when evaluating the following expression, NNMi includes interfaces with (interface description) ifDesc containing VLAN, and excludes any Interfaces that have VLAN10 for the (interface name) ifName value: 

(ifDesc like VLAN AND NOT (ifName=VLAN10)) 

Note View the expression displayed under Filter String to see the logic of the expression as it is created.

EXISTS

Used for filters that include Capabilities or Custom Attribute names and values in the Filer String.

Indicates that you want NNMi to consider interfaces that have Capabilities or Custom Attributes when evaluating the Filter String.

Tip When creating complex Filter Strings that include customAttrName and customAttrValue pairs as one component of an "or" statement, to prevent NNMi from excluding Nodes that have zero Custom Attributes, use EXISTS or NOT EXISTS criteria for the customAttrName and customAttrValue pair definitions.

Otherwise Nodes that do not have any Custom Attributes are automatically excluded even if they have values that pass other aspects of your filter.

For example, when evaluating the following Filter String, NNMi includes interfaces with (interface description) ifDesc containing VLAN, as well as any Interfaces Custom Attribute Role value is LAN Connection to Oracle Server

(ifDesc like VLAN OR EXISTS((customAttrName=Role AND customAttrValue=LAN Connection to Oracle Server)))

Note View the expression displayed under Filter String to see the logic of the expression as it is created.

NOT EXISTS

Used for filters that include Capabilities or Custom Attribute names and values in the Filer String. Indicates that you want NNMi to consider interfaces that do not have any Capabilities or Custom Attributes when evaluating the Filter String, but exclude the interfaces that match the expression that follows the NOT EXISTS.

Tip When creating complex Filter Strings that include customAttrName and customAttrValue pairs as one component of an "or" statement, to prevent NNMi from excluding Nodes that have zero Custom Attributes, use EXISTS or NOT EXISTS criteria for the customAttrName and customAttrValue pair definitions.

Otherwise Nodes that do not have any Custom Attributes are automatically excluded even if they have values that pass other aspects of your filter.

For example, when evaluating the following expression, NNMi includes interfaces with (interface description) ifDesc containing VLAN, and excludes any Interfaces that have the Custom Attribute Role and that Role value is LAN Connection to Oracle Server

(ifDesc like VLAN OR NOT EXISTS((customAttrName=Role AND customAttrValue=LAN Connection to Oracle Server)))

Note View the expression displayed under Filter String to see the logic of the expression as it is created.

Delete

Deletes the selected expression.

Note If the Boolean Operator is selected, the Payload Filter Editor deletes all expressions associated with the Boolean Operator.