-
User Guide for Cisco Unified Operations Manager 2.1
-
Preface
-
Introduction
-
Using the Service Level View
-
Monitoring Alerts and Events
-
Monitoring Service Quality Alerts
-
Monitoring Phone Activities
-
Managing Views
-
Using Performance Graphs
-
Using Phone Status Testing
-
Using Synthetic Tests
-
Using Node to Node Tests
-
Using Batch Tests
-
Using History Reports
-
Generating IP Phone and Video Phone Reports
-
Using the Personalized Report
-
Using Notifications
-
Using Device Management
-
Managing Groups
-
Configuring Polling and Thresholds
-
Configuring SRST Poll Settings
-
Administering Operations Manager
-
Setting Up Cisco Unified Communications Management Application Links
-
Performance Counters Shown in the Detailed Device View
-
MIBs Polled and Perfmon Counter Objects Used
-
Processed and Pass-Through Traps
-
Notification MIB
-
Events Processed
-
Working with Voice Application Systems and Software
-
Polling—SNMP and ICMP
-
How Operations Manager Calculates Repeated Restarts and Flapping
-
Operations Manager Support for SNMP MIBs
-
Data File Formats
-
Index
-
Table Of Contents
How to Use the Alerts and Events Display
Selecting Views for Alerts and Events
Resetting Filters on the Alerts and Events Display
Starting the Alerts and Events Display
Understanding the Layout of the Alerts and Events Display
Getting Alert Details Using the Alerts and Events Display
Getting Alert and Event Details
Starting the Alert Details Page
Event Processing for the Alerts and Events Display During High CPU Utilization
Understanding the Layout of the Alert Details Page
Viewing Events Associated with an Alert
Understanding the Service Impact Report
Viewing a Service Impact Report
Starting the Detailed Device View
Understanding the Layout of the Detailed Device View
Viewing Device Elements in Detail
Information Shown in the Detailed Device View
Suspending/Resuming a Device Component
Responding to Alerts Using the Alerts and Events Display
Clearing an Alert—Using the Alerts and Events Display
Acknowledging an Alert—Using the Alerts and Events Display
Responding to Alerts Using the Alert Details Page
Acknowledging an Alert—Using the Alert Details Page
Clearing an Alert—Using the Alert Details Page
Sending E-Mail in Response to an Alert
Responding to Events Using the Alert Details Page
Acknowledging an Event—Using the Alert Details Page
Clearing an Event—Using the Alert Details Page
Sending E-Mail in Response to an Event
Monitoring Alerts and Events
These topics describe monitoring Alerts and Events:
•
How to Use the Alerts and Events Display
•
•
How to Use the Alerts and Events Display
The Alerts and Events display provides real-time information about the operational status of your network. The displays are designed so that you can set them up and leave them running, providing an ongoing monitoring tool that signals you when something needs attention. When a fault occurs in your network, Cisco Unified Operations Manager (Operations Manager) generates an event or events that are rolled up into an alert. If the alert occurs on an element in your active view (a logical grouping of device groups), it is shown on your Alerts and Events display.
After setting up a view, you can customize your Alerts and Events display by selecting specific views and using filters:
•
•
You can also change the names of Operations Manager events to names that are more meaningful to you. These customized names are reflected in both the Alerts and Events display and any Alert History reports you generate. Alert History and Alerts and Events displays reflect customized names. For information on changing Operations Manager event names using Notification Customization, see Customizing Events, page 15-23.
You can monitor all devices that Operations Manager supports, once you have added those devices using Device Management and ensured that the devices are in your view.
Note
Selecting Views for Alerts and Events
When you select Monitoring Dashboard > Alerts and Events to open the Alerts and Events display, all available views are listed in the view pane on the left side of the display. If the views shown do not meet your needs, you can create a new view as described in Managing Views, page 6-1.
The view pane is updated every two minutes. You can have up to 18 views in the view pane in a single Alerts and Events display. See Activating and Deactivating a View, page 6-2.
Filtering Alerts and Events
Filters allow you to manipulate the Alerts and Events display to show alerts based on their severity, status, and originating device.
Note
Step 1
Step 2
Figure 3-1 shows the Alert Filters page. You can populate the Device Type box by selecting device types from the button to the right of the Device Type box. By default, all device types are selected.
Figure 3-1 Alerts and Events—Alert Filters Dialog Box
Step 3
Figure 3-2 Alerts and Events—Device Types Dialog Box
Step 4
Step 5
Resetting Filters on the Alerts and Events Display
From the Alerts and Events display, you can clear any filters that you have set. As a result, all alerts in the currently selected view are displayed.
Step 1
Step 2
Starting the Alerts and Events Display
To start the Alerts and Events display, select Monitoring Dashboard > Alerts and Events. Figure 3-3 shows an example of an Alerts and Events display.
Tip
Figure 3-3 Alerts and Events Display
View pane. See View Pane.
Window tools area. See Window Tools Area.
Launch information and view status bar area. See Launch Information and View Status Bar Area.
Command button area. See Command Button Area.
Tabular display pane. See Tabular Display Pane.
Understanding the Layout of the Alerts and Events Display
These topics provide details about the information in the Alerts and Events display.
View Pane
The view pane lists the currently available views. Views must be created and activated before they are shown in the Alerts and Events display. By default, two views—All Alerts and Suspended Devices—are always shown, and cannot be deleted from your Alerts and Events display. (To create and activate a view or remove an unwanted view from your display, see Managing Views, page 6-1.)
The current view is highlighted in the view pane. The contents of the current view are shown in the tabular display pane to the right of the view pane. To select another view, simply click the view name in the view pane.
Figure 3-4 shows four active views; the current view is All Alerts. Icons next to the views indicate the severity of the alerts received from devices in those views, signaling you that the devices may need attention.
Figure 3-4 Alerts and Events Display—View Pane and Severity Icons
For the current view, All Alerts, severity icons also appear next to the alerts in the tabular display, as shown in Figure 3-4, to help you quickly locate a specific alert.
The view pane is updated every two minutes. You can have up to 18 views in the view pane in a single Alerts and Events display.
Launch Information and View Status Bar Area
The launch information area shows the current time on the server when the Alerts and Events display is being viewed.
The view status bar lists the selected view, which is shown in the tabular display pane, and the number of alerts in that view.
Tabular Display Pane
The tabular display pane is the core of the Alerts and Events display. It contains a list of all alerts that are occurring on the devices in your current view. This pane is refreshed every 30 seconds. For an explanation of all of the items in the tabular display, see Getting Alert Details Using the Alerts and Events Display.
Icons alert you to what needs attention; for example:
•
•
The tabular display pane is scrollable and can store up to 1,000 records.
Window Tools Area
The top-right corner of the Alerts and Events display contains available tools buttons. All buttons are described in Table 3-1.
Command Button Area
The command buttons on the Alerts and Events display provides you ways to respond to alerts and reset filters.
Table 3-2 Alerts and Events Display—Command Buttons
Refresh
Refreshes the Alerts and Events display.
Reset Filters
Resets the filters set on the Alerts and Events display.
Clear
Clears the alert. See Clearing an Alert—Using the Alert Details Page.
Acknowledge
Changes the alert's status to Acknowledged. See Acknowledging an Alert—Using the Alert Details Page.
Close
Closes the Alerts and Events display.
Table 3-3 Alerts Details Page—Command Buttons
Refresh
Refreshes the contents in the Alerts Details page manually.
Reset Filters
Resets the filters set on the Alerts and Events display.
Clear
Clears the alert. See Clearing an Alert—Using the Alert Details Page.
Acknowledge
Changes the event status to Acknowledged. See Acknowledging an Alert—Using the Alert Details Page.
Close
Closes the Alerts and Events display.
Getting Alert Details Using the Alerts and Events Display
Use the tabular display in the Alerts and Events display to obtain more information about the alerts that are occurring in your current view. In the tabular display, as shown in Figure 3-3, alerts are grouped by their severity: critical, warning, or informational. Within these severity groupings, or buckets, alerts with the latest change are listed first.
When an alert is generated, it remains in the Alerts and Events display until it cleared. While the alert is in the display, if any events occur or get updated, the alert is updated. If a cleared event recurs, a new event with a new event ID is shown.
Note
•
•
Table 3-4 defines the Alerts and Events tabular display elements. All elements are updated every 30 seconds.
Tip
Table 3-4 Alerts and Events Tabular Display—Contents
Severity of alert
Critical
Warning
Informational/Unidentified Trap Alert
ID
Alert identifier number. Clicking this link opens an Alert Details page (see Starting the Alert Details Page).
Device Type
Type of device. Inventory Collection in Progress indicates that Operations Manager was discovering the device when the alert occurred. The actual device type is reflected when new events occur. The device type is displayed as N/A during inventory collection. For more information, see Using Device Management, page 16-1.
Device Name
Device name or IP address. Clicking this link opens the Detailed Device View (see Viewing Device Elements in Detail).
Alert Age
Time span since alert creation, depending upon alert status.
Latest Event Time
Date and time alert last occurred or was changed. Diamonds indicate alert activity, such as a new event, alert acknowledgement, new user annotation, and so forth; no diamonds indicates that the alert is stale. Alerts are grouped by severity, and within severities, alerts with the latest change are listed first.
Alert was updated within last 15 minutes.
Alert was updated within last 16-30 minutes.
Alert was updated within last 31-45 minutes.
No diamonds
Alert was updated 46 or more minutes ago.
Latest Event Category
Event category, one of the following: Application, Connectivity, Environment, Interface, Other, Reachability, and System Hardware. For alerts containing multiple events, the tabular display shows the category of the event with the most recent change.
Status
Alert status, based on last polling.
Active
Alert is live. (Note that alerts on suspended devices remain active; see Sending E-Mail in Response to an Alert.)
Cleared
Alert is no longer live.
Acknowledged
Alert was manually acknowledged by a user (from Alert Details page).
User Cleared
Alert was manually cleared by a user.
Getting Alert and Event Details
These topics address how to start and use the Alert Details page to get detail information on events:
•
•
•
Starting the Alert Details Page
The Alert Details page provides information about all of the events that were rolled up into a specific alert.
Note
Step 1
Step 2
Figure 3-5 Alert Details Page
Alerts status bar. See Alert Status Bar.
Tools column list. Select a tool, such as Event History. See Tools Column.
Launch information area. See Launch Information Area.
Command button area. See Command Button Area.
Tabular display pane. See Tabular Display Pane.
Notes pane. See Notes Pane.
Window tools area. See Window Tools Area.
Event Processing for the Alerts and Events Display During High CPU Utilization
During periods of high CPU utilization and alert buildup, Operations Manager stops processing events. You will know when this is occurring by the message that appears in the view status bar of the Alerts and Events display. The message states that alert processing is being controlled, and not every alert is being displayed. The excess Alerts and Events display events are written to the NMSROOT\logs\itemlogs\EPM\EPMDroppedEvents.log file, and these events:
•
•
•
Note
Understanding the Layout of the Alert Details Page
These topics provide details about the information on the Alert Details page. These panes are illustrated in Figure 3-5.
Alert Status Bar
The alert status bar lists details about the alert with which the listed events are associated. Table 3-5 explains the contents of the alert status bar area.
Table 3-5 Alert Details Page—Alert Status Bar Contents
Device Name
Device name or IP address.
Device
Device type.
Status
Alert status, based on last polling.
Active
Alert is live. (Note that alerts on suspended devices remain active; see Sending E-Mail in Response to an Alert.)
Cleared
Alert is no longer live.
Acknowledged
Alert was manually acknowledged by a user (from the Alert Details page).
Alert ID
Alert identifier number
Alert Age
Time span since alert creation, depending upon alert status:
Active or Acknowledged
Time span between alert creation and current server time.
Cleared
Time span between alert creation and Last Change time (the Last Change time may also represent when the alert was cleared).
Last Change
Time and date of last alert update (indicates activity, such as an event recurrence, alert acknowledgement, the addition of an annotation, and so forth). Alerts are grouped by severity, and within severities, alerts with the latest change are listed first.
Launch Tools
You can launch Operations Manager tools and external applications.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Launch Information Area
The launch information area shows the current time on the server when the Alerts and Events display is being viewed.
Tabular Display Pane
On the Alert Details page, the tabular display pane contains a table that lists details about events. These events are associated with the alert listed in the alert status bar. You can refresh the display by clicking Refresh at the bottom of the pane. For an explanation of all of the items in the table, see Getting Alert and Event Details.
The tabular display is scrollable and can store up to 1,000 records. See Viewing Events Associated with an Alert for actions you can perform from this page.
Window Tools Area
The top-right corner of the Alert Details page contains a printer tool button and an Operations Manager Tools button, as described in Table 3-6.
Table 3-6 Alert Details Page—Window Tools Buttons
Opens a printer-friendly version for printing.
Opens the Operations Manager online help.
Tools Column
The tools column includes Alert History. Selecting Event History opens a 24-hour Event History report on the component. See 24-Hour Context-Based Alert and Event History Reports, page 12-3.
Notes Pane
The notes pane lists any alert annotations that users have entered. The notes pane is a convenient tool for making sure that all users see alert information. You can add an annotation by clicking the Annotate button. Adding an annotation is described in Annotating an Alert.
Command Button Area
In addition to the Annotate button in the notes pane, the command button area provides other ways to respond to alerts.
Table 3-7 Alert Details Page—Command Buttons
Refresh
Refreshes the tabular display.
Acknowledge
Changes the event status to Acknowledged. See Acknowledging an Alert—Using the Alert Details Page.
Clear
Clears the Alert. See Clearing an Alert—Using the Alert Details Page.
Notify
Sends e-mail notification of the alert. See Sending E-Mail in Response to an Alert.
Close
Closes the Alert Details page.
Viewing Events Associated with an Alert
Use the tabular display in the Alert Details page to obtain more information about all of the events associated with a specific alert. In the tabular display, as shown in Figure 3-6, events with the latest change are listed first.
Events remain on the Alert Details page until the parent alert expires.
Note
If an event recurs, the existing event is not updated. Instead, the recurrence is shown as a new event with a new event ID.
Figure 3-6 provides an example of an Alert Details table. This table is refreshed every 30 seconds.
Figure 3-6 Alert Details Page—Tabular Display
Table 3-8 defines the table elements. Click Refresh at the bottom of the pane to refresh the table contents.
Tip
Table 3-8 Alert Details Tabular Display—Contents
Event ID
Event identifier number. Clicking this link opens the Event Details page (see Getting Alert and Event Details). Note that this event ID is not the same as the event code provided by Notification Services. For more information, see Customizing Events, page 15-23.
Description
Operations Manager event name (as described in Events Processed, page E-1). You can also change the names of Operations Manager events to names that are more meaningful to you. For information on changing Operations Manager event names using Notification Customization, see Customizing Events, page 15-23.
Component
Device element on which the event occurred.
Time
Time at which the event occurred.
Status
Event status, based on last polling.
Active
Event is live.
Cleared
Event is no longer live.
Suspended
Device is suspended.
Resumed
Device is being resumed.
Deleted
Device has been deleted.
Tools
Links to tools that allow you to perform additional tasks. For example:
•
•
•
Impact
Options are None or High. The High option is a link that opens a Service Impact Report. See Understanding the Service Impact Report.
Viewing Event Details
The Event Details page provides additional details about the event, such as the values of MIB attributes at the time of the event, polling and threshold information, and utilization information. The Event Details page also provides ways to respond to events.
Step 1
Step 2
Step 3
Figure 3-7 shows a typical Event Details page.
Figure 3-7 Event Details Page
The information that is shown in the Event Details page depends on the event description. Table 3-9 describes the Event Details page command buttons.
Table 3-9 Event Details Page—Command Buttons
Acknowledge
Changes the event status to Acknowledged. See Acknowledging an Event—Using the Alert Details Page.
Clear
Moves the event status to UserCleared. See Clearing an Event—Using the Alert Details Page.
Notify
This helps to send email.See Sending E-Mail in Response to an Alert.
Close
Closes the Alerts Details page.
Help
Opens the online help.
Annotate
Add details for other users about event information. See Annotating an Alert.
Understanding the Service Impact Report
Service Impact reports provide you with a single report that describes how a particular failure impacts the rest of your IP telephony deployment. The report answers the following:
•
•
•
Viewing a Service Impact Report
Step 1
Step 2
Step 3
Step 4
Figure 3-8 Service Impact Report
Table 3-10 Service Impact Report Column Descriptions
Alerts
Severity
Alert severity.
Alert ID
Alert identification number.
Device Name
Device name or IP address.
Device Type
Device type.
Status
Alert status based on last polling.
Associated Events
Alert ID
Alert identification number for which the event is associated.
Event ID
Event identification number.
Description
Operations Manager event name (as described in Events Processed, page E-1). You can also change the names of Operations Manager events to names that are more meaningful to you. For information on changing Operations Manager event names using Notification Customization, see Customizing Events, page 15-23.
Component
Device element on which the event occurred.
Status
Event status, based on last polling.
Active
Event is live.
Cleared
Event is no longer live.
Suspended
Device is suspended.
Resumed
Device is being resumed.
Deleted
Device has been deleted.
Overall Impact Summary
Provides an explanation of the impact that this failure will have on the rest of your IP telephony deployment.
Getting Device Information
The Detailed Device View provides extensive information on the devices and device components listed in Starting the Detailed Device View. You can view information on devices that Operations Manager is currently monitoring, as well as devices whose monitoring you have suspended.
In the Detailed Device View, you can do the following:
•
•
•
•
•
Starting the Detailed Device View
You can start the Detailed Device View from within the Alerts and Events display, either by clicking a device link, or by starting the Alert Details page and selecting Detailed Device View from the Launch Tools pull-down list.
Note
Note
Step 1
Step 2
If the item you select is the subdevice of an aggregated device, the Detailed Device View displays the subdevice's managed state and device capability. To display a complete Detailed Device View of the subcomponent, click the Launch New DDV for This Device button.
Step 3
•
•
Figure 3-9 provides an example of a Detailed Device View.
Figure 3-9 Detailed Device View
Component categories pane. See Component Categories Pane.
Windows tool bar. See Window Tools Area.
System information pane. See System Information Pane.
Command button area. See Command Buttons Area.
Tools. See Launch Tools.
Record count. See Record Count.
Understanding the Layout of the Detailed Device View
These topics provide details about the information in the Detailed Device View.
Component Categories Pane
The component categories pane lists the components of the device or cluster. Selecting a component allows you to view detailed information pertaining to that component, such as CPU usage for a processor, TotalUsedMemory for memory, and so forth.
If the device you are viewing is an aggregate device, the subdevice also appears in the component categories pane. To display a complete Detailed Device View of the subcomponent, click the Launch New DDV for This Device button. This button appears after you select the subdevice from the device tree.
System Information Pane
The system information pane provides information such as the system name, IP address, SysUnified Communications ID, system contact, and so forth. Table 3-13 lists the Detailed Device View information you will see for each device type. See Viewing Device Elements in Detail.
If the system information pane lists an attribute with no value, it is because of one of the following reasons:
•
•
•
You can suspend or resume device or component monitoring by clicking the Suspend or Resume button (the button shown depends on the component's current managed state). These functions are described in these sections:
•
Launch Tools
The Launch Tools pull-down list enables you to launch other Operations Manager tools as well as external applications from the Detailed Device View. The tools that are available to you may vary depending on the device type and its configuration.
The following options can be seen in the Launch Tools menu:
•
•
•
•
•
•
•
•
•
•
•
•
Window Tools Area
The top-right corner of the Detailed Device View contains available tools buttons. All buttons are described in Table 3-11.
Table 3-11 Detailed Device View Page—Window Tools Buttons
Exports the current display to a PDF file.
Opens a printer-friendly version for printing.
Opens the online help.
Record Count
The record count lists the number of information types available on the device.
Command Buttons Area
In addition to the Suspend and Resume button in the system information pane, the command button area provides other ways to respond to alerts.
Table 3-12 Detailed Device View—Command Buttons
Suspend or Resume
Either activates or deactivates monitoring of the device. Only one option is available at a time, depending on the state of the device. See Suspending Device Monitoring.
Refresh
Refreshes the Detailed Device View page. (The Detailed Device View is not automatically refreshed; you must do so manually.)
Launch Information
The launch information shows the current time on the server when the Detailed Device View display is being viewed. If you refresh the page, the time is updated.
Viewing Device Elements in Detail
This topic explains what the Detailed Device View displays for different device classes.
Information Shown in the Detailed Device View
Note
•
•
•
•
•
•
Also, the left pane of the Detailed Device View does not display a Unity Connection Ports option.
Table 3-13 shows the types of device information displayed for the various device types that Operations Manager supports.
Table 3-13 Device Information Provided by the Detailed Device View
Content Networking
X
X
Digital Voice Gateway
X
X
Gatekeeper
X
X
X
X
IPSLA
X
X
X
MRP
X
X
X
Personal Assistant
X
Media Server
X
X
X
X
Cisco Unified Communications Manager
Performance Counters3
Phone Access Switch
X
X
X
Probe
X
X
X
Routers
X
X
X
RSM, MSM, MSFC
SPE
X
X
SSP
X
X
Switch
X
X
X
RSM, MSM, MSFC
Unified Communications Manager or Cluster
Media Servers, Digital Voice Gateways,
Voice Gateways, VoiceMail GatewaysUnified Contact Center Enterprise (formerly IPCC)
X
X
X
X
Functional components:
•
•
•
•
•
•
•
•
•
Performance Counters3
Unity
X
X
X
X
Unity Express
X
X
X
Performance Counters3
Voice Gateway
X
X
X
X
X
Cisco Unified Communications Manager Express, SRST-enabled
Cisco Unity ConnectionIOS GW Performance Counters3
RSM, MSM, MSFC
VoiceMail Gateway
X
X
X
1 You can display a new Detailed Device View for each of these subcomponents.
2 Voice applications and synthetic testing.
3 For descriptions of the Performance Counters, see Performance Counters Shown in the Detailed Device View, page A-1.
The status categories—Environment, System, Interface, and so forth—list different entries depending upon the device class. The following are some examples of what you may see under the status categories:
•
Note
•
•
Note
•
•
Suspending Device Monitoring
You can stop monitoring a device by selecting it and clicking the Suspend button in the Detailed Device View. Conversely, you can resume monitoring by clicking the Resume button. These actions are also available for suspending and resuming specific components. See these topics for more information:
•
Suspending/Resuming Devices
When you stop monitoring a device—changing its monitored state to false—Operations Manager no longer polls that device for information. Subsequent events (including traps) are ignored and no longer processed.
When you suspend a device, the active alerts and events on the device remain in the Active state. Also, a Suspended event occurs on the device, which you can view in the device's Alert Details page. This happens to ensure that:
•
•
Step 1
Step 2
Step 3
•
•
Note
•
Figure 3-10 provides an example of the Detailed Device View for a suspended device. Note the Resume button at the bottom of the window.
Figure 3-10 Detailed Device View—Suspended Device
Suspending/Resuming a Device Component
You can unmanage or remanage device components using the Detailed Device View. When you unmanage a component—changing its managed state to false—Operations Manager no longer polls that component for information. Subsequent events (including traps) are ignored and no longer processed.
Note
Step 1
Step 2
Step 3
Step 4
Figure 3-11 shows the location of the Managed State column for a managed application (Voice Services).
Figure 3-11 Editing the Managed State of a Device Component
Responding to Alerts
You can respond to alerts from either the Alerts and Events display or the Alert Details page.
•
•
Responding to Alerts Using the Alerts and Events Display
The Alerts and Events Display provides command buttons in the bottom-right corner of the page for you to take action on alerts.
You can perform the following actions:
•
•
Clearing an Alert—Using the Alerts and Events Display
Clearing an alert moves the alert to the Cleared state and all the events under it to the user cleared state. Cleared alerts are displayed minimum for 30 minutes and maximum for 60 minutes in the Alerts and Events display.
The alert is purged from database if there are no user cleared events present in the database. As a result, when the next event is raised for the same device, the alert ID remains the same. If all the events are in the cleared state then the alert is purged from the database. As a result, when the next event is raised for the same device, a new alert ID is generated.
When you clear an alert, this status change is populated to all Alerts and Events displays. Once an alert is cleared, the status cannot be changed back. To get the existing state of the events for that device, you must manually delete and re-add the device to Operations Manager. If any new event on the alert recurs, the status reverts to active.
Note
Use this procedure to clear one or more alerts from the Alerts and Events display.
Step 1
Step 2
Step 3
Step 4
Acknowledging an Alert—Using the Alerts and Events Display
Acknowledging an active alert signals other users that you are aware of the alert. When you acknowledge an alert, this status change is populated to all Alerts and Events displays.
Use this procedure to acknowledge one or more alerts from the Alerts and Events display.
Step 1
Step 2
Step 3
Step 4
Responding to Alerts Using the Alert Details Page
The Alert Details page provides command buttons in the bottom-right corner of the page (see Figure 3-5). The Suspend button is discussed in Suspending Device Monitoring. This topic explains how you can perform the following actions:
•
•
•
•
Acknowledging an Alert—Using the Alert Details Page
Acknowledging an active alert signals other users that you are aware of the alert. When you click the Acknowledge button on the Alert Details page, the alert is acknowledged. To acknowledge all of the events, open the alert, check the Select All check box, and click Acknowledge.
If an event on the alert recurs, the alert status reverts to active.
Step 1
Step 2
Step 3
Clearing an Alert—Using the Alert Details Page
Clearing all active events under an alert changes the alert state in the Alerts and Events display to cleared. You may want to clear an alert when you are receiving erroneous events or are no longer interested in receiving that event. Cleared alerts are displayed minimum for 30 minutes and maximum for 60 minutes in the Alerts and Events display.
The alert is purged from database if there are no user cleared events present in the database. As a result, when the next event is raised for the same device, the alert ID remains the same. If all the events are in the cleared state then the alert is purged from the database. As a result, when the next event is raised for the same device, a new alert ID is generated.
When you click the Clear button after selecting all the events in Alert Details page, the status change is populated to all Alerts and Events displays. The alert status moves into the Cleared state, and the events move into the user cleared state. Once an alert is cleared, the status cannot be changed back. To get the existing state of the device, you must manually delete and re-add the device to Operations Manager.
Note
If an event on the alert recurs, the status reverts to Active.
Step 1
Step 2
Step 3
Annotating an Alert
You can annotate an alert by clicking the Annotate button. An editable Annotation dialog box opens; in the dialog box, you can enter up to 255 characters. Any number of annotations can be entered. An annotation is shown whenever other users view the alert from an Alert or Event Details page.
Step 1
Step 2
Step 3
Sending E-Mail in Response to an Alert
When you click the Notify button in an alert details page (for an alert on a device), Operations Manager opens a dialog box that you can complete to manually send an e-mail notification to multiple recipients. The e-mail notification adds the event/alert details for the selected event. (If you want to send automatic e-mail notifications when alerts or events occur on certain devices, use Notification Services to set up an e-mail notification subscription. (See Configuring Notifications, page 15-7.)
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Responding to Events Using the Alert Details Page
The Alert Details page provides command buttons in the bottom-right corner of the page (see Figure 3-5). The Suspend button is discussed in Suspending Device Monitoring. This topic explains how you can perform the following actions:
•
•
•
•
Acknowledging an Event—Using the Alert Details Page
Acknowledging an event signals to other users that you are aware of the event and are working on it.
After the issue gets resolved, it moves to the Cleared state. Cleared events should not be Acknowledged.
Step 1
•
•
•
Step 2
Step 3
Clearing an Event—Using the Alert Details Page
Clearing an event changes the alerts state in the Alerts and Events display to user cleared. When the issue is resolved, the event is moved to the cleared state.
User cleared events do not move to the active state directly. Any subsequent active events are suppressed. If you manually clear an event it signals that you are no longer interested in receiving that event.
Once an event is cleared, the status cannot be changed back. To get the existing state of the device, you must manually delete and re-add the device to Operations Manager. User cleared events are displayed for 30 minutes.
Note
If an event on the alert recurs, the status reverts to Active.
Step 1
•
•
•
Step 2
Step 3
Annotating an Event
You can annotate an alert or an event by clicking the Annotate button. An editable Annotation dialog box opens; in the dialog box, you can enter up to 255 characters. Any number of annotations can be entered. An annotation is shown whenever other users view the alert from an Alert or Event Details page.
Step 1
•
•
•
Step 2
Step 3
Step 4
Sending E-Mail in Response to an Event
When you click the Notify button in an alert details page (for an alert on a device), Operations Manager opens a dialog box that you can complete to manually send an e-mail notification to multiple recipients. The e-mail notification adds the event/alert details for the selected event. (If you want to send automatic e-mail notifications when alerts or events occur on certain devices, use Notification Services to set up an e-mail notification subscription. (See Configuring Notifications, page 15-7.)
Step 1
•
•
•
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
