Multiple Alerts generated by Single Link Failure

Unanswered Question
Jan 12th, 2009

Hi all,

We are using Ciscoworks LMS 2.6 as enterprise wide alerting system.Now,recently our backbone DS3 MPLS link in our data centre went down,which was connecting to service provider PE.Now it resulted in generation on hundreds of alerts and mails from all the remote sites devices which are connected to this MPLS cloud.Is there a intelligent way of configuring alerts which would minimize an event like this to only one e-mail.Basically, I am looking at multiple events generated for single network failure to give single e-mail.

thanks in advance

Sachin Verma

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Mon, 01/12/2009 - 08:46

If you are using DFM to send you email notifications, then there is no way to correlate them automatically. DFM is a device-level fault management tool, and does not do network-level correlation.

If you're using RME's syslog automated action feature, you could convert from using an email action to a script action, then write a program which does the de-duplication and correlation for you (maybe using its own backend database).

Unfortunately, there is nothing built-in to LMS which does this.

sachin.verma Mon, 01/12/2009 - 10:00

Thanks Clarke,can u provide a sample script which can be used in RME.

thanks

sachin verma

Joe Clarke Mon, 01/12/2009 - 10:22

I don't have one. I was merely providing an idea. You might try searching the Internet for people that have done de-duplication or correlation programs which could be adapted for RME's automated action facility.

Actions

This Discussion