Alarm Categories - different email destinations

[DAMIANGILL]

Hi Peeps,

We are using unified manager as a managed service for our customers and are remotely monitoring a lot of systems, as part of this process we have a requirement for different categories of alarms (Emergency, Critical, Error, Warning, Information) to be sent to different email destinations. The main reason for this is because we already have a system in place that categories alarms for managed firewalls and managed servers. For example we need:

Emergency      - CAT1 email address

Critical/Error     - CAT2 email address

Warning           - CAT3 email address

Information       - No email sent

With the software in it's current form it doesn't seem possible to set this up, the categories you can select for alerting are:

All

Information or Worse

Warning or Worse

Error or Worse

Critical or Worse

Emergency only

So we could for example use Emergency only for CAT1 however when we configure CAT2 it will automatically include CAT1 again. The only solution we can think of (that doesn't include creating a lot of alarms) is to use some kind of content redirection (rule based system like outlook rules or transport rules in exchange) to read the subject and/or body of the email and forward the email to the destination we want.

Am writing this in the hope a product manager will see this, ideally we would want options like

All

Information or Worse

Information only

Warning or Worse

Warning only

Error or Worse

Error only

Critical or Worse

Critical only

Emergency only

In this way the software is a lot more configurable. If anyone else has come across this and has a neat solution please let me know.

[agireesh · Accepted solution]

With OCUM 5.x, I think  this is not possible but you can use OCUM 6.x to achieve this. Using OCUM 6.x you can create the different alarms base on severity (one alarm for all critical events, one alarm for all error events and one alarm for all waring event ).

6.1RC1 build is available, you can download it from support.netapp.com.

http://support.netapp.com/NOW/cgi-bin/software?product=OnCommand+Unified+Manager+for+Clustered+Data+ONTAP&platform=VMware+vSphere

Regards,

Gireesh

[chute]

Have you tried using the "Event Class" option under the advanced tab? You can specify only the events you would like to forward. Thus excluding the type by severity. You can get pretty creative with it as well. If you have multiple customers within the same class then it may get a little sticky. Just thought I would put this out there in case you hadn't seen it.

Here is a little bit of info from the following link... https://library.netapp.com/ecmdocs/ECMP1222482/html/GUID-A5573EA6-BC5B-46D4-8227-A01AAE66707E.html

Event class

You can configure a single alarm for multiple events using event class. If you add an alarm based on the event class, you should decide if an event in an event class should trigger the alarm and, if so, which event class. For example, the expression userquota.*|qtree.* matches all user quota or qtree events.

Note: You can view the list of event classes from the CLI, by using the following command: dfm eventType list. You can view the list of events specific to an event class by using the following command: dfm eventType list -C event-class.

[DAMIANGILL]

The documentation and release notes/admin guides seem to suggest that OCUM 6.x is for Cluster Mode only? Does anyone know if it works for 7-Mode? We do not currently manage any cluster mode systems so would just want 6.x to manage 7-Mode for now.

[DAMIANGILL]

Great thank you for this suggestion, it appears you can't change the event classes themselves so in practice this won't really work for us as the classes are quite broad and include lots of alarms that we don't want emails for.

I'll download and play with OCUM 6.x and see if it will work with 7-Mode...

[kryan]

You are correct - UM 6.x only supports only Clustered Data ONTAP.  This is the same for OnCommand Performance Manager as well.

You should continue to use Unified Manager 5.2.x for 7-Mode Data ONTAP.

Thanks,

Kevin

[DAMIANGILL]

Hey Kyran,

Do you know if there is going to be on-going development of OCUM 5.x? Would be good to get the same alarm functionality that is in 6.X on 5.X.

[kryan]

This is a question best answered by Product Management.

However, I can state that UM 5.x will continue to be updated but not necessarily enhanced.  Changing the alarm functionality would be an enhancement.

Kevin