ONTAP Discussions

Exclude "ALERT" event type vol.wafl.full for specific volumes

bpostk
1,612 Views

We have an SVM setup for an internal customer who creates persistent volumes for k8s vms using the trident driver.  We have specific alerting setup for them in Active IQ that works for their needs, but we also use Ontap events for our purposes.   Their volumes often fill up and then we get spammed with Ontap events for vol.wafl.full.   Their volumes are created via the API and are added and removed as k8s vm's request resources, but they all volume names are prepended with "trident_pvc_"

 

Example vol names:

trident_pvc_836e672...

trident_pvc_836e073...

trident_pvc_836e332...

 

Is there a way to exclude the event wafl.vol.full and match to only volumes that start with the string "trident_pvc"?

 

I do not want to to exclude all wafl.vol.full events

 

This is what we currently use for a catch all:
Filter Name Rule Rule Message Name SNMP Trap Type Severity
Position Type
----------- -------- --------- ---------------------- --------------- --------
storageteam
10 include * * EMERGENCY, ALERT, ERROR
11 exclude * * *

1 ACCEPTED SOLUTION
4 REPLIES 4

pedro_rocha
1,595 Views

bpostk
1,593 Views

That looks to be a global change across the cluster?  Which we wouldn't want to do, and some of these trident volumes can get to 100% at times before their checks kick in and push an expansion through the trident driver

pedro_rocha
1,591 Views

did you check the command?

 

volume modify -volume VOL1...

 

You can change it on a per volume basis

bpostk
1,436 Views

Good to know, thanks.  As these volumes are created and destroyed dynamically, hopefully that is something that can be set with the trident driver.

Public