Archived community.zenoss.org | full text search
Skip navigation
Up to Discussions in zenoss-dev
841 Views 3 Replies Latest reply: Oct 23, 2013 10:08 AM by Thomas Pollet RSS
jregovic Rank: White Belt
jregovic
10 posts since
May 20, 2010
Currently Being Moderated

Oct 22, 2013 11:54 AM

Daemon or transform?

We reently switched to Zenoss from an older monitoring platform and lost one minor feature.

 

We used to have the facility to increase the severity for alerts based on the number of occurrences in a given time frame.

 

I have a transform that increases severity based on counts, but I'd like to create soemthing more general that won't resuire a different transform for each event class and mapping.

 

Would it be adviseable to create a daemon that would query the event list for certain event classes and  modify severities based on some pre-configured criteria?

  • Thomas Pollet Rank: White Belt
    Thomas Pollet
    27 posts since
    Aug 23, 2012
    Currently Being Moderated
    1. Oct 23, 2013 6:29 AM (in response to jregovic)
    Re: Daemon or transform?

    Why would you have to create a different transform for each event class? You can create a transform on the root and it will be inherited by all other transforms (/zport/dmd/Events/editEventClassTransform) .

  • jregovic Rank: White Belt
    jregovic
    10 posts since
    May 20, 2010
    Currently Being Moderated
    2. Oct 23, 2013 9:39 AM (in response to Thomas Pollet)
    Re: Daemon or transform?

    I figure that I would need a transform for each event class if I want to have different criteria for different even classes.

     

    In a nutshell, I want to increase the severity of an event if there are X occurrences in Y seconds. If I have a different X and Y for different event classes, I assume that I would want a different transform for each event class. Also, I figure there would be a performance hit if have a transform like that that works on every event that is received.

  • Thomas Pollet Rank: White Belt
    Thomas Pollet
    27 posts since
    Aug 23, 2012
    Currently Being Moderated
    3. Oct 23, 2013 10:08 AM (in response to jregovic)
    Re: Daemon or transform?

    There are several ways to accomplish what you want using event transforms.

    A zendmd script which continuously polls the event database is also an option (don't forget to sync() ), I guess it kind of depends on the amount of events and the complexity of the processing.

More Like This

  • Retrieving data ...

Legend

  • Correct Answers - 4 points
  • Helpful Answers - 2 points