Notification Deduplication - Can It Be Turned Off?

Not Yet Reviewed

We had an event not send notification. The message in the alarmpoint.txt file is shown below. Basically when we send a message to xMatters I want it to go out - every time. We will handle deduplication earlier in the notification stream. Is there a way to turn it off? What rules is it using?

[1/16/2015 3:00 PM] Dost, Abdul:
2015-01-16 14:48:16,238 [hpomi20|hpomi20-1] WARN - Agent ...
2015-01-16 14:48:16,238 [hpomi20|hpomi20-1] WARN - Agent Client: **Deduplicator Suppressed Notification **: An event with tokens (source_ci_target_id, 16a6e6eb8417c0f258dfcc2ae8fd7799)(node_hints_hint, citbd-nn02.mitre.org|10.140.12.206)(category, SNMP)(control_transferred, false)(eti_hint, )(source_ci_configuration_item_label, )(related_ci_target_type, urn:x-hp:2009:software:data_model:type:node)(related_ci_target_id, 7948)(related_ci_hint, (UNAVAILABLE EVENT PARAMETER $39))(originating_server_dns_name, BSMGWPRD02.MITRE.ORG)(source_ci_target_type, urn:x-hp:2009:software:data_model:type:hp_operations_agent)(source_ci_configuration_item_id, 16a6e6eb8417c0f258dfcc2ae8fd7799)(state, open)(sending_server_dns_name, BSMGWPRD02.MITRE.ORG)(ci_resolution_info_quality_metric, 0)(originating_server_ip_address, 129.83.28.87)(received_on_ci_downtime, false)(assigned_group_name, R701_CLOUDERA)(node_hints_dns_name, citbd-nn02.mitre.org)(assigned_used_login_name, <unknown>)(node_ref_node_name, )(apia_process_group, 9c43f480-9db8-71e4-1bcb-81531ca90000)(related_ci_configuration_item_id, 7948)(subcategory, )(sending_server_ip_address, 129.83.28.87)(source_ci_configuration_item_type, hp_operations_agent)(assigned_used_user_name, <unknown>)(ci_resolution_info_hint_count, 0)(duplicate_count, 0)(severity, normal)(ci_resolution_info_status, Note: Hint "(UNAVAILABLE EVENT PARAMETER $39)" did not match.
Warning: Could not find host and CI information.

Note: Node has been generated dynamically.)(related_ci_configuration_item_label, )(time_received, 2015-01-16T14:48:14.818-05:00)(priority, lowest)(title, Service: EV_SERVICE_HEALTH_CHECK_BAD Msg: The health test result for SQOOP_SQOOP_SERVER_HEALTH has become bad: The Sqoop 2 Server is not running.)(node_ref_targed_type, urn:x-hp:2009:software:data_model:type:node)(related_ci_configuration_item_name, )(ci_resolution_info_matched_hint_count, 0)(time_created, 2015-01-16T14:48:14-05:0

0

Comments

2 comments
Date Votes

Please sign in to leave a comment.

  • Thank you - this is exactly what I was looking for.

    0
  • Hi Edward,

    you can configure the deduplicator filter in your integration by editing the "deduplicator-filter.xml" in your integration agent's conf folder. Then save the file and restart the IA.

    The default filter for your integration looks like this:

    <!-- Filter to prevent duplicate HP OMi events injecting more often than once every 12 hours -->
    <filter name="hpomi20">
    <predicates>
    <predicate>title</predicate>
    <predicate>state</predicate>
    <predicate>severity</predicate>
    <predicate>priority</predicate>
    </predicates>
    <suppression_period>43200</suppression_period>
    <window_size>100</window_size>
    </filter>

    You can't delete the predicates or make them blank, but you can set the suppression period to be very short (eg, 1 second) and the window size to be very small (eg, 1 event.) This should prevent the filter from interfering with delivery of any notifications.

    You can find complete information in the integration agent guide at https://support.xmatters.com/hc/en-us/articleattachments/200545775/xm510integrationagent_guide.pdf

    Using the information in the guide, you will hopefully find a configuration that fully meets your requirements.

    0

Didn't find what you were looking for?

New post