We had an event not send notification. The message in the alarmpoint.txt file is shown below. Basically when we send a message to xMatters I want it to go out - every time. We will handle deduplication earlier in the notification stream. Is there a way to turn it off? What rules is it using?
[1/16/2015 3:00 PM] Dost, Abdul:
2015-01-16 14:48:16,238 [hpomi20|hpomi20-1] WARN - Agent ...
2015-01-16 14:48:16,238 [hpomi20|hpomi20-1] WARN - Agent Client: **Deduplicator Suppressed Notification **: An event with tokens (source_ci_target_id, 16a6e6eb8417c0f258dfcc2ae8fd7799)(node_hints_hint, citbd-nn02.mitre.org|10.140.12.206)(category, SNMP)(control_transferred, false)(eti_hint, )(source_ci_configuration_item_label, )(related_ci_target_type, urn:x-hp:2009:software:data_model:type:node)(related_ci_target_id, 7948)(related_ci_hint, (UNAVAILABLE EVENT PARAMETER $39))(originating_server_dns_name, BSMGWPRD02.MITRE.ORG)(source_ci_target_type, urn:x-hp:2009:software:data_model:type:hp_operations_agent)(source_ci_configuration_item_id, 16a6e6eb8417c0f258dfcc2ae8fd7799)(state, open)(sending_server_dns_name, BSMGWPRD02.MITRE.ORG)(ci_resolution_info_quality_metric, 0)(originating_server_ip_address, 129.83.28.87)(received_on_ci_downtime, false)(assigned_group_name, R701_CLOUDERA)(node_hints_dns_name, citbd-nn02.mitre.org)(assigned_used_login_name, <unknown>)(node_ref_node_name, )(apia_process_group, 9c43f480-9db8-71e4-1bcb-81531ca90000)(related_ci_configuration_item_id, 7948)(subcategory, )(sending_server_ip_address, 129.83.28.87)(source_ci_configuration_item_type, hp_operations_agent)(assigned_used_user_name, <unknown>)(ci_resolution_info_hint_count, 0)(duplicate_count, 0)(severity, normal)(ci_resolution_info_status, Note: Hint "(UNAVAILABLE EVENT PARAMETER $39)" did not match.
Warning: Could not find host and CI information.
Comments
Please sign in to leave a comment.
Thank you - this is exactly what I was looking for.
Hi Edward,
you can configure the deduplicator filter in your integration by editing the "deduplicator-filter.xml" in your integration agent's conf folder. Then save the file and restart the IA.
The default filter for your integration looks like this:
<!-- Filter to prevent duplicate HP OMi events injecting more often than once every 12 hours -->
<filter name="hpomi20">
<predicates>
<predicate>title</predicate>
<predicate>state</predicate>
<predicate>severity</predicate>
<predicate>priority</predicate>
</predicates>
<suppression_period>43200</suppression_period>
<window_size>100</window_size>
</filter>
You can't delete the predicates or make them blank, but you can set the suppression period to be very short (eg, 1 second) and the window size to be very small (eg, 1 event.) This should prevent the filter from interfering with delivery of any notifications.
You can find complete information in the integration agent guide at https://support.xmatters.com/hc/en-us/articleattachments/200545775/xm510integrationagent_guide.pdf
Using the information in the guide, you will hopefully find a configuration that fully meets your requirements.