Multiple Alerts generated by Single Link Failure

Unanswered Question
Jan 12th, 2009
User Badges:

Hi all,

We are using Ciscoworks LMS 2.6 as enterprise wide alerting system.Now,recently our backbone DS3 MPLS link in our data centre went down,which was connecting to service provider PE.Now it resulted in generation on hundreds of alerts and mails from all the remote sites devices which are connected to this MPLS cloud.Is there a intelligent way of configuring alerts which would minimize an event like this to only one e-mail.Basically, I am looking at multiple events generated for single network failure to give single e-mail.

thanks in advance

Sachin Verma

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Joe Clarke Mon, 01/12/2009 - 08:46
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

If you are using DFM to send you email notifications, then there is no way to correlate them automatically. DFM is a device-level fault management tool, and does not do network-level correlation.

If you're using RME's syslog automated action feature, you could convert from using an email action to a script action, then write a program which does the de-duplication and correlation for you (maybe using its own backend database).

Unfortunately, there is nothing built-in to LMS which does this.

sachin.verma Mon, 01/12/2009 - 10:00
User Badges:

Thanks Clarke,can u provide a sample script which can be used in RME.


sachin verma

Joe Clarke Mon, 01/12/2009 - 10:22
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

I don't have one. I was merely providing an idea. You might try searching the Internet for people that have done de-duplication or correlation programs which could be adapted for RME's automated action facility.


This Discussion