Mediation Event Management Properties

Several property file settings configure batching operations of SNMP traps at the Mediation Agent before those are sent to the rules in Application Server. The property file settings allow administrators flexibility so that processing and batching can accommodate the particular network environment. Settings like the number of traps include in a batches, which traps to reject, correlation and others are available. The maximum number of traps that can be configured into a single batch is 2,000.

Event services are deployed as managed beans. Initial setting come from the following files:

• Service configuration for an application server is in owareapps/eventmgmt/server/conf/em-service.xml

• Service configuration for a mediation server is in owareapps/eventmgmt/server/conf/em-med-service.xml

You can see active settings and possibly modify them by using the JMX console from a browser (see also JMX Console):

http://serverIP/jmx-console on Windows

http://serverIP:8080/jmx-console on Solaris/Linux

The default user/password is admin/dorado. Set a filter to oware:* for a more concise view of the relevant settings

Some settings require that a service is stopped and restarted for the setting to take effect. Only changes made to server/conf files on disk will take effect after a restart.

• See NotificationProcessingMBean for event processing settings

• See OWSysLogMBean for syslog listener queue and archive settings

Here are some examples of exposed service settings for Event Management:

<!--

| NotificationProcessingMBean

-->

<mbean code="com.dorado.assure.mediation.NotificationProcessingMBean"

name="oware:service=NotificationProcessingMBean">

<attribute name="TransportBatchSize">2000</attribute> <!--# events-->

<attribute name="TransportBatchInterval">500</attribute> <!--#

milliseconds-->

<attribute name="ServerRetryInterval">5</attribute> <!--# seconds-->

<attribute name="ServerRefreshInterval">30</attribute> <!--# seconds-->

<attribute name="SuppressUnknownSource">false</attribute>

<attribute name="SuppressInformational">false</attribute>

[spacer]

Setting SuppressUnknownSource to true rejects all event from unknown sources -- without historical event records. Setting SuppressInformational to true rejects all events that do not produce an alarm, correlation or automation (not necessarily just events of informational severity). Basically it suppresses events that are only inserted in history.

<attribute name="QueueBatchSize">1000</attribute> <!--# entries-->

<attribute name="QueueFileBufferSize">131072</attribute> <!--# bytes-->

<attribute name="QueueFileName">@OWARE_USER_ROOT@/owareapps/eventmgmt/temp/event_spool.

dat</attribute>

<attribute name="QueueMaxFileSize">20971520</attribute> <!--# bytes-->

<attribute name="QueueMaxSize">100000</attribute> <!--# entries-->

<depends>oware:service=HAServiceController</depends>

</mbean>

 

<!--

| SNMPListenerMBean

-->

<mbean code="com.dorado.assure.mediation.SNMPListenerMBean"

name="oware:service=EMSNMPListenerMBean">

<attribute name="V3AuthRefreshInterval">60</attribute> <!--# seconds-->

<depends>oware:service=NotificationProcessingMBean</depends>

</mbean>

 

<!--

| SysLogMBean

-->

<mbean code="com.dorado.assure.mediation.OWSysLogMBean"

name="oware:service=EMSysLogMBean">

<attribute name="SpoolZipLevel">1</attribute>

<attribute name="SpoolReset">true</attribute>

<attribute name="QueueLimit">50000</attribute>

<attribute name="QueueFetchPref">5000</attribute>

<attribute name="MaxQueueReadSize">50000</attribute>

<attribute name="SpoolFileName">syslog_spool.dat</attribute>

<attribute name="SpoolPath">@OWARE_USER_ROOT@/owareapps/eventmgmt/temp</attribute>

<attribute name="SpoolSize">5242880</attribute>

<attribute name="ArchiveMaxLength">52428800</attribute>

<attribute name="ArchiveEnabled">false</attribute>

<attribute name="ArchivePath">@OWARE_USER_ROOT@/owareapps/eventmgmt/archive</attribute>

<attribute name="ArchiveZip">true</attribute>

<depends>oware:service=NotificationProcessingMBean</depends>

</mbean>