Event Storm Suppression Pane

To access

Administration > Event Processing > Correlation > Event Storm Suppression

Alternatively, click Event Storm Suppression.

Relevant tasks

To configure Event Storm Suppression, see Configure Event Storm Suppression.

See also

For more information about Event Storm Suppression, see Event Storm Suppression.

The Event Storm Suppression pane displays the UI elements listed in the following table.

UI Element (A-Z)

Description

Reloads the Event Storm Suppression configuration.

Edit Item: Opens the Event Storm Suppression dialog box to edit the Event Storm Suppression configuration.

Restore To Default

Restore To Default: Restores the customer-modified factory-predefined Event Storm Suppression Rule to factory settings.

Activate/Deactivate Item: Toggles between enabling and disabling Event Storm Suppression.

General Section
Active

Indicates whether the Event Storm Suppression configuration is activated.

Artifact Origin

Content types are referred to using the following terminology:

  • Predefined Content

    Predefined content is usually content provided by HPE or HPE Partners and is designed to provide the initial configurations for an OMi installation. After installing a predefined content pack, you may change these initial artifacts to suit your environment and management needs. Any modified predefined artifacts are labeled as Predefined (Customized).It is not possible to remove predefined artifacts, but you can revert any customized artifacts to their original, "predefined" values.

  • Custom Content

    Custom content is content that is created by the customer, for example for managing a custom, in-house application, and is labeled as Custom.

  • Customized Content

    Modified predefined artifacts are labeled as Predefined (Customized).You can revert any customized artifacts to their original, "predefined" values.

Conditions Section
Begin Event Storm Suppression ...

Displays a summary of the conditions that must be met for an event storm to be detected. For example, when more than 1000 events are received from the same node within the last 5 minutes.

End Event Storm Suppression ...

Displays a summary of the conditions that must be met for an event storm to be considered to be over. For example, when less than 100 events are received from the same node within the last 5 minutes.

Exceptions Section

Configuration used to select events from a system under event storm conditions which are retained and displayed in the Event Browser.

Note Events that are released back into the event pipeline as a result of matching an exception rule may undergo subsequent processing which can result in these events not being displayed in the Event Browser or appearing in the Closed Events Browser.

Order

Where more than one mapping rule is available for a configuration item type, the number in the Order column indicates the order in which the rules are applied during the mapping process. Using the Move Up and Move Down buttons, you can change the position of rules in the list.

Note If a rule matches, no further rules are applied.

Filter

Filter used to select events to retain.

Log only

Events generated from a system under event storm conditions matching a log-only exception rule are retained but automatically closed.

Begin Event Section

Event sent to the Event Browser when an event storm is detected, identifying the affected system and the event storm rate. You can customize the severity, category and subcategory. In addition, you can chose to close a previous, open event storm end event on receipt of a new event storm begin event

Title

Format of the title assigned to the begin event storm event.

ETI Hint

ETI hint assigned to the begin event storm event (always EventStorm:On).

Severity

Severity assigned to the begin event storm event.

Category

Category assigned to the begin event storm event.

Subcategory

Subcategory assigned to the begin event storm event.

Close Previous End Event

Activate to automatically close an open event storm end event when a new event storm is detected.

Name

Name of a custom attribute to be included in the event used to indicate the start of an event storm.

Value

Value of a custom attribute to be included in the event used to indicate the start of an event storm.

End Event Section

Event sent to the Event Browser when an event storm is assessed as over, identifying the affected system and the post-storm event rate. The event storm end event closes the associated event storm begin event automatically. You can customize the severity, category and subcategory. In addition, you can chose to close the event storm end event directly to history

Title

Format of the title assigned to the end event storm event.

ETI Hint

ETI hint assigned to the end event storm event (always EventStorm:Off).

Severity

Severity assigned to the end event storm event.

Category

Category assigned to the end event storm event.

Subcategory

Subcategory assigned to the end event storm event.

Log Only

Activate to automatically close the end event storm event.

Name

Name of a custom attribute to be included in the event used to indicate the end of an event storm.

Value

Value of a custom attribute to be included in the event used to indicate the end of an event storm.