Unified Manager 6.3 - how to Co-relate mutiple events triggered from same source/time

[Cavin]

Does anyone know about how to Co-Relate multiple alerts triggered concurrently, almost at same time, from same source? as Argument passing takes input and insert into database for automation ticket, but it will trigger several multiple tickets which ideally, if to consolidate into single event ticket generated, would be ideal for our case. any good advice? thank you.

[Livewire18]

I dont this this will be a function of the OCUM software. This would likely need to be done via the script. Possibly looking at thing like host name and time between alerts.

[KrishnaVasudevan]

Hello,

You can use OnCommand API Services to retrieve this information. When deployed in environments with OCUM, API Services gives you access to events triggered by UM.

If you notice in the screenshot attached, you can either filter by timestamp (use the UNIX timestamp) and/or source resource key (a unique key assigned to the storage object that acts as your source of the event)

The API call will look similar to 

https://10.xxx.xx.xx:8443/api/1.0/ontap/events?source_resource_key=ac69eeea-b1e7-11df-9a2f-00a0983124e2:type=aggregate,uuid=2ca9824b-dcdd-47a9-ac09-6bec2fe7418b&created_timestamp=1473963617

 This will give a consolidated list of all the events triggered from UM by the same source at the same time.

Thanks and Regards,

Krishna Vasudevan