Wednesday, 11 August 2010

[zenoss] employ ping down dependency to suppress other events


sum = str(evt.summary)
if getattr(evt, 'severity', 0) > 0 \
and getattr(evt, 'eventClass', '/Unknown') != '/Status/Ping' \
and device and device.getPingStatus() > 0:
       evt._action = "drop"

if (sum.find("Command timed out")>=0) \
or (sum.find("Socket timeout")>=0) \
or (sum.find("Unable to read")>=0) \
or (sum.find("Process not running")>=0) \
or (sum.find("SNMP agent down")>=0) \
or (sum.find("No response from")>=0):
     if device.getPingStatus() <= 0:
           time.sleep(8)
           if device.getPingStatus() > 0:
                  evt._action = "drop"
     else:
           evt._action = "drop"

   if getattr(evt, 'prodState', 99)<400:
      evt._action = "drop"
Posted by at
Labels: , , ,

11 comments:

  1. Matt4 October 2011 at 13:25

    Great post. Using Zenoss 3.2, how do I use this? Where do I put it?

    ReplyDelete
  2. Chitambira4 November 2011 at 05:01

    Matt, you put that code in the transform for all events at /Events

    ReplyDelete
  3. Unknown28 December 2011 at 03:38

    Where specifically should i place this code? Create New Event Class Mapping?

    ReplyDelete
  4. Ryan Matte7 June 2012 at 09:52

    Your else statement is indented incorrectly. With the way you have it, if it sees the device up initially it's always going to drop it. The else should be part of the first if, not the second if. That way, if it immediately sees it down, it drops it, but if it sees it up it waits the 8 seconds, then if it sees it down it drops it otherwise it doesn't. Move the else statement out by 1 level.

    ReplyDelete
    Replies
    1. Chitambira5 July 2012 at 09:03

      You are very right Ryan, that's how i actually set it up, but I guess this was a formatting error when I published this blog entry. I hope people who used it had noticed that. I have since corrected the entry.
      many thanks

      Delete
  5. Ryan Matte7 June 2012 at 09:56

    Last comment was by me.

    ReplyDelete
  6. Matt17 August 2012 at 13:34

    This comment has been removed by the author.

    ReplyDelete
  7. Matt17 August 2012 at 13:35

    This comment has been removed by the author.

    ReplyDelete
  8. Matt17 August 2012 at 13:44

    For 3.x Zenoss, click on Events, Event Classes and then the BOTTOM LEFT there is a little gear. Click that and Transform.

    Thanks for the code. I have an MPLS network with about 5 routers, any way to get suppress the events from the devices behind them when they go down?

    ReplyDelete
  9. Matt20 August 2012 at 12:21

    I just tried this on the new Zenoss 4.2 and it no longer works. :( Errors out.

    Problem with line 19: if getattr(evt, 'prodState', 99)<400:

    ReplyDelete
  10. Guacamole Accessories30 April 2023 at 10:27

    Thank yoou for being you

    ReplyDelete

Subscribe to: Post Comments (Atom)