Oct 22, 2013 11:54 AM
Daemon or transform?
-
Like (0)
We reently switched to Zenoss from an older monitoring platform and lost one minor feature.
We used to have the facility to increase the severity for alerts based on the number of occurrences in a given time frame.
I have a transform that increases severity based on counts, but I'd like to create soemthing more general that won't resuire a different transform for each event class and mapping.
Would it be adviseable to create a daemon that would query the event list for certain event classes and modify severities based on some pre-configured criteria?
Why would you have to create a different transform for each event class? You can create a transform on the root and it will be inherited by all other transforms (/zport/dmd/Events/editEventClassTransform) .
I figure that I would need a transform for each event class if I want to have different criteria for different even classes.
In a nutshell, I want to increase the severity of an event if there are X occurrences in Y seconds. If I have a different X and Y for different event classes, I assume that I would want a different transform for each event class. Also, I figure there would be a performance hit if have a transform like that that works on every event that is received.
There are several ways to accomplish what you want using event transforms.
A zendmd script which continuously polls the event database is also an option (don't forget to sync() ), I guess it kind of depends on the amount of events and the complexity of the processing.
Follow Us On Twitter »
|
Latest from the Zenoss Blog » | Community | Products | Services Resources | Customers Partners | About Us | ||
Copyright © 2005-2011 Zenoss, Inc.
|
||||||||