Configure Rate (Time Period and Count) for an SNMP Trap Incident

For information about each SNMP Traps tab: See Also

Use Rate configuration to track incident patterns based on the number of incident reoccurrences within a specified time period. After the count within the specified time period is reached, NNMi emits a Rate Correlation incident and continues to update the Correlation Notes with the number of occurrences within that rate.

Note: Suppression, Enrichment, and Dampening are not supported for Rate incidents.

As long as your defined criteria (Count and Hours, Minutes, Seconds) is sustained, the following information is updated in the Correlation Notes of the Rate Correlation incident:

• the actual number of occurrences of incidents for that sustained rate (Count)
• the sustained time interval (Hours, Minutes, Seconds)

For example, you can set a Rate configuration to track when a link is intermittently down at least three times in 30 minutes. NNMi shows the first occurrence of the rate incident in the incident view and uses Correlation Notes to update the number of incidents and time interval to reflect all the incremental incident occurrences and time periods. To continue the example, if the rate of three times in 30 minutes is sustained for 90 minutes, NNMi updates the Correlation Notes to specify that 9 incidents occurred in 90 minutes.

NNMi provides preconfigured Rate correlations. You can add new Rate correlations.

When you open the Incident form of the newest instance:

• On the General tab, two fields notify you that the Rate correlation is working:

  • Correlation Nature: Rate Stream Correlation
  • Count: x
• On the Correlated Children tab, each incident is listed in the table.

• If a Rate Correlation Incident is dampened, note the following:

  • Rate Correlation Incidents inherit the Dampening configuration settings from its Correlated Children.

  • NNMi always retains the Parent Rate Correlation Incident, even if its Child Incidents are Closed and subsequently deleted.

To establish a rate correlation within an incident configuration:

1. Navigate to the Rate tab.

   1. From the workspace navigation panel, select the Configuration workspace.
   2. Expand the Incidents folder.
   3. Select SNMP Trap Configurations.

   4. Do one of the following:

      • To create a new configuration, click the  New icon.
      • To edit an existing configuration, select a row, click the  Open icon, and continue.
      • To delete an existing configuration, select a row and click the  Delete icon.
   5. On the form that opens, locate the Rate tab.
2. Provide the definition for this Rate configuration (see the "Rate Configuration Definition" table).

3. Optional. If your Comparison Criteria includes custom incident attributes (CIA) to identify one specific incident, use the Comparison Parameter List table to define each CIA.See Rate Comparison Parameters Form.
4. Click  Save and Close to save your changes and return to the previous form.

Rate Configuration Definition

Attribute	Description
Enable	Use this attribute to temporarily disable an incident's rate settings: Disable  = Temporarily disable the selected configuration. Enable  = Enable the selected configuration. If enabled, NNMi actively tracks any reoccurrences of the designated incident within the time period you specify, and generates a Rate incident.
Count	Specify the number of reoccurrences required before your Rate Configuration starts working.
Hours	Used with the Minutes and Seconds attributes to specify the time duration within which the reoccurrences are measured.
Minutes	Used with the Hours and Seconds attributes to specify the time duration within which the reoccurrences are measured.
Seconds	Used with the Hours and Minutes attributes to specify the time duration within which the reoccurrences are measured.
Parent Incident	Click the icon and select Quick Find. Select Rate Correlation from the list.
Comparison Criteria	Specify which group of attributes must match before the incident is identified as a duplicate. The possible groups of attributes consist of the following choices. Name value of the Incident (from the General tab on the Incident form).  Source Node value (from the Basics group on the Incident form). Address or name of the node for which the incident was generated. Source Object value (from the Basics group on the Incident form). For example, the Source Object for a LinkDown incident is interface. CIA custom incident attribute values (select from the list displayed on the Custom Attributes tab on the Incident form). If you want to use CIA as part of your comparison criteria, see Rate Comparison Parameters Form (SNMP Trap Incident).
Rate Comparison Parameters	Optional. If you selected a Comparison Criteria that includes CIA, you must populate one or more rows in this table. See Rate Comparison Parameters Form (SNMP Trap Incident).