Ciscoworks Alerts (delay)

Unanswered Question
Feb 10th, 2009

We have an issue here in Ciscoworks where in most of the alerts we received from Ciscoworks are delayed. Like last January 22 issues. One of our devices is down and there should be an alert on the same day of incident but we only received the alert last January 24. This is not the first we

encounter this kind of issue. Please advice on why the alerts are delayed and

how to avoid this.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Joe Clarke Wed, 02/11/2009 - 10:45

In what application are you receiving these alerts? What version of LMS are you using? What does one of these alerts look like?

ronmarcojr Wed, 02/11/2009 - 17:07

The version of LMS is 2.6.

Below is the sample of email notification that we have received.

From: pcgnm2001

Sent: Saturday, January 24, 2009 5:32 AM


Subject: 00026QB ; pcgsw1011 ; Thu 22-Jan-2009 21:20:48 CST ; Critical ;

OperationallyDown ; Active

EVENT ID = 00026QB

ALERT ID = 000064L

TIME = Thu 22-Jan-2009 21:20:48 CST

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = pcgsw1011

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = OperationallyDown::Component=PORT-pcgsw1011/10101 [Gi1/0/1] [*** Connection To PCGRT9011 ***];Type=ETHERNETCSMACD;OperStatus=DOWN;InterfaceCode=CODEUNKNOWN;DuplexMode=FULLDUPLEX;AdminStatus=UP;LastChangedAt=22-Jan-2009 9:20:48 PM;IsFlapping=false;Max

Joe Clarke Wed, 02/11/2009 - 18:29

So is the problem that email notifications are being delayed, or that these events are not showing up in DFM's Alerts and Activities Display? From this particular event, it appears that it should be showing up in AAD around 1/22/09 21:20.

ronmarcojr Wed, 02/11/2009 - 18:43

Most of the alerts from Alerts and activities feature are delayed, not only in email notification.

Any suggestions?

Joe Clarke Wed, 02/11/2009 - 18:57

Enable Event Promulgation Module and Adapter debugging under DFM > Configuration > Other Configurations > Logging. When the problem occurs again, post the logs under NMSROOT\log\dfmLogs\EPM and epa along with a sample delayed event.

ronmarcojr Wed, 02/11/2009 - 19:05

If we enable the debugging on ciscoworks, this will not incur high utilization on the server? Our syslog file occupies large disk space because the logrot is not working.. Please advise..

Thank you very much for your assistance..

Joe Clarke Wed, 02/11/2009 - 19:12

It depends on how active DFM is (i.e. the number of devices and number of events) as to the CPU impact this debugging will incur. Typically, the impact will be minimal.

ronmarcojr Wed, 02/11/2009 - 19:20

Thank you very much!

I'll post the logs and the sample delayed events when the problem reoccurs..


This Discussion