Logical rule incident

I'm looking for solutions to implement the existing rules incidents from metric alerts logical. The general idea is to have notifications sent by email if a specific measure is critical or warning for 15 minutes or more. If this is the case, the notification is sent. If the event clears until the mark of 15 minutes... then no notification is sent. There is a second set of rules for the clear event. The clear event is sent immediately, without delay. The problem is the following:

If the alert metric hits critical for 5 minutes and then clears... the critical notification sends (as expected), but the light did. Is it possible to link the event clear to the first rule, so that it sends only the clear event if the initial critical or warning event occurred? Or can I change the critical warning event to include also the clear event...

I noticed one part of configuring incident rule action should perform the action if: event is particularly serious for awhile. Now, if it is an event based only on clear events... and I put it only perform the action (send a notification by e-mail) if the event is in criticism/warning for 15 minutes or more... I'm assuming that this would not work. Is there a way to incorporate the two rules together? Mostly looking for help to understand the logic behind the rule sets, so that these notifications to work as expected.

The simple answer is that you can't write an event rule to you by email for a clear event based on the fact that you have received an email about a warning or a critical event after 15 minutes. If anyone on the list has a way to do this using a few events, please jump in. Looks like a reasonable ER for review: email me for an event if I received for a prior test of this sequence. Please do not hesitate to drop.

The more detailed answer is:
Think of an Incident as a way to identify which many events you see in MS are important to you and deserve to be followed up as questions. It is a new concept in EM 12 c key and all the features are oriented incidents. The Administrator's guide has more details on this (http://docs.oracle.com/cd/E24628_01/doc.121/e24473/incident_mgmt.htm#BABCFGJI). I think that your request is consistent with the idea of Incidents.

The events for which you get an email after 15 minutes are clearly important to you - if these should generate incidents.
In the event rule - actions step - you will see an option to create an incident, you can also assign to your user name, and you can set a priority. Once created an incident - all future events are automatically correlated to this incident - including the clear. So my suggestion was to create a case for these events and then create a rule that works on these incidents to get messages when it emerges. You should see this option when you first try to create a rule in a ruleset class. In this way, you get emails only on incidents that have been created and not to clear all events.

Hope that helps.

Tags: Enterprise Manager

Similar Questions

  • Problem with logic groups combining data at the point of importation

    I really hope that you will be able to help me with a problem I've had for the last few days.

    The scenario I have requires a logical group be created as the source data must be mapped differently if its + ve or - ve even thought the source account is the same.

    I created a logical group complex and added the corresponding logical group account in the account mapping table. The group uses the definition of rule 001806 *.

    The accounts that would be affected by this rule are below the values:
    18060000 - 2093096.69
    18060000 2093096.69
    18060005 - 2474955.48
    18060005 2474955.48
    18060015 11319512.13
    18060015-8000000 (a PEAK partner)
    18060015 - 3319512.13 (a PEAK partner)

    The + ve values need to go to an asset account and the values of ve - to a liability account.

    At the stage of import, I have a zero value which seem to be the sum of the values of the first 4, substantive values 3 then appear on individual lines.

    Step validate the asset HFM account displays the 3 + values of ve (15.8 M) Although 2 of them apparently wide net to zero with the values of the first and the third - ve. However, the liability account shows the background raising 2 (11. 3 m) as its missing the other 2 values - ve. Assets and liabilities HFM values should be the same

    In the account mapping, I'm using the following script for the + ve (its been reformatted for this forum):
    ' If varValues (9) > '0' Result = "BSA401000" Else Result = "Ignore" End If

    The script - ve is:
    ' If varValues (9) < "0" Result = "BSL625600" Else Result = "Ignore" End If

    I later changed the logical group to be Simple, but I get a similar result, although what I am trying to reach seems to be detailed in the Administrator's Guide FDM under the heading create accounts within Simple logic groups

    I understand that it is a little lengthy so apologies if you need more information, then please let me know and I will happy to provide more

    Thank you, James

    You could even put in place two mapping rules and avoid the complexity of a logic rule, if you wish. The mapping will continue to the next line if it does not meet the criterion, and there is no result.

    Side assets would be with a name of rule vAsset (you can change this, but it must be unique to the next line)
    If varValues (9) > 0 then result = "BSA401000."

    and then you add a second line to your card with a name of vLiab rule and check the sign flip.

    If varValues (9)< 0="" then="" result="BSL6256002">

    In the past I have avoided the rules of logic to the extent possible, by adding removes the ability to drill holes in the source file.

    Concerning
    JOINT TASK FORCE

  • Exclude the host sent notification, em12c

    What is the best solution in order to exclude all types of notification of a specific host application components and it is.

    I would like to install the agent in a test environment, but I don't want any notification of this environment which, for example, reboot for many times.

    Concerning

    Mario

    It's pretty easy to do.  If you have not yet customized default incident defined rule you.   The installer-> Incidents-> rules Incident.  Then you will need to select the rule of the incident and select stock-> create like.  You cannot change the oracle supplied.  Once you have done this, in the first section entitled targets, you have the choice to filter the which targets your rule applies to.  Ideally you create groups for the Prod, Dev, etc, and apply the rule to the targets of the Prod and not dev.   In this case, if you have just one host to be excluded, you can use the option exclude targets.

  • Intelligent calculation

    I read an article yesterday where default essbase was intelligent calculation turned to know which blocks are dirty and only calculate values on the blocks. Is this correct?

    Imagine that I have a dataform of planning with on lines cost centers and I change 1 of them. What I usually do is in the rules, fix that all cost centers in the form because I don't know which one was changes so I need to apply a given logical rule for them, but from what I've read, it seemed to me that actualy essbase knows what has been changed. If I don't fix the cost centers it will actually only calculate where it was changed?

    Thank you

    Hello

    I don't think it's as simple as that. Although the intelligent calculation is defined on IT by default, it does not mean that you are by default taking advantage of it. As you say in your message, Essbase brand as own blocks and dirty and not recalculates the blocks and its dependent parents who remain as clean. However, set up a clean block requires that you perform one of the following:

    1 compute the set of the database with ALL CALC

    2. determine the whole of the database with CALC DIM (all dimensions at once)

    3. explicitly force blocks to be marked as clean in your calc with SET CLEARUPDATESTATUS AFTER script;
    I do not think that anyone in this forum would go ALL CALC or CALC DIM with all dimensions both in their planning applications because both are extremely expensive calculations. And if you do not use the command in option 3 too, so you don't actually own blocks in your database, as a result, intelligent calculation is also useful when it is set to OFF. Of course, you can control the behavior with the command above in your calculations, but it requires you to be very careful when you turn it on and off. In addition, there are areas of caution in Essbase calculation smart usage, which can lead to an error in calculation of data. So, it is not really as simple as it may seem it is to use this feature properly.

    My personal opinion is that there are better ways to optimize the performance of your calculations in which you are in control. This is why, in fact turn it off in config Essbase and I recommend the same thing.

    See you soon,.

    Alp

  • Clear all alerts stateless in OEM12c with emcli

    Hello

    Can someone please help me on how to clear all alerts without State for all targets with emcli, the following example does not work:

    . "" / emcli clear_stateless_alerts-older_th = 7 - target_type = "oracle_database" - target_name = ' * '.

    There is no such target * (oracle_database).

    emcli does not recognize "*" or "%".  I also want to include all the target_typeif possible, there are many targets and target_type to make them one by one.

    Thank you

    Willem

    Hi Willem.

    In the game of out-of-box rules: "Management of Ruleset incidents for all targets", there is a named rule: 'Rule to auto-clear metric more than alert events 7 days' which applies to all stateless events that don't have a related case and will be open for more than 7 days. If this out-of-box ruleset is activated, then these events are automatically deleted by the rule.

    Refer to

    12 c Cloud Control: automatically configure a rule Incident to metric alerts clear stateless (Doc ID 1559436.1)

    Kind regards
    Rahul

  • Repeat Notifications

    EM Cloud control 12 c 12.1.0.2.2
    in the Setup - Notification methods

    I have Send Notifications to repeat checked...
    It is set to 60 minutes and a maximum of 12 repetitions

    I had an agent down 36 hours ago, and I got 1 notification of it being down... Why have I no rehearsals...

    Can you confirm that repeat notifications are enabled at the global level and the level of rule incident?
    For the steps, check the Note 1515303.1: 12 c Cloud Control: steps to enable / disable and configure the feature to repeat.

  • Options of mutually exclusive in a function of the Option

    Hello

    I have an obligation to implement a mutually excluding option feature - for example: there are 10 options depending on the option. The last one is 'None of the above '. In this case, when the user selects 'None of the above', all other options selected must be unselected and vice versa. I can create a logic rule (exclude or deny) to implement, but we do not want the rule violation message. In this case, the only option is a CX rule, I guess. All those put in place this type of requirements using CX? If so, could guide you. Thanks in advance.

    Biju-

    The postValueChange event has an event called changedNode parameter. If your CX is related to the function of the Option and its scope is a subtree of nodes of Base, from the changedNode to your method CX will tell us which Option has been selected (or deselected; your CX should explain deselection as a possible "ValueChange").

    Mathgamain

  • Question about exception management

    DB version: 10.2

    We have several procedures in a package. All exception handling procedures be made as below
    when others then
           dbms_output.put_line(sqlerrm);
           raise_application_error(-20002, sqlerrm);
    end mystoredproc;
    Lets say I have A, B, C and D lined up for execution of procedures. While running, what happens if procedure B has encountered an error and is managed by raise_application_error thingy, it will stop the execution of other procedures C and D as well?

    John_75 wrote:

    We have several procedures in a package. All exception handling procedures be made as below

    Then all your exception handling procedures are flawed.

    The results of PL/SQL engine in an exception explicitly being raised with a unique error code. Your exception handlers that take and change this exception in an error of-20002 code empty.

    It's downright put silly to deal with exceptions.

    There are 3 fundamental reasons to deal with an exception.

    (1) it is not an error of the company. For example to get a NO_DATA_FOUND for a function of product disc0unt is not an error and simply means that the product is not disc0unted. In this case, the exception is removed and applied relevant business logic.

    (2) the error relates to the very specific business logic/rules and can be transformed into a very useful application error. For example, if an DUP_VAL_ON_INDEX exception for this specific code means company error "+ product category already exists + ' and the code returns a unique error code and a message for it.

    (3) protection of resources. For example, a LOB Locator was created and must be released if there is an error, otherwise there will be resource leaks. So, the exception is caught, the resources released (or app error log update, etc.) - after which the exception is relaunched.

    If you can not check one of these 3 reasons for the existence of an exception (in any programming language) handler, then you are most likely all wrong exception.

  • AF:inputComboboxListOfValues new values!

    Hi guys,.

    I have a related af:inputComboboxListOfValues a ViewObject, the component works fine. It shows all the values in my ViewObject but I need put a value on such a list:

    The return values of my viewobject: AA, BB, CC, DD and I need input another combination EE, AB, CD for example, but I can't enter a value without viewobject range values because the component show me: "Invalid value".

    is possible, that I entered a value without a viewobject range values?

    I use JDeveloper 11.1.2.1.0

    Kind regards

    Renan

    I have not tried the suggestion below. You can try the below suggestion.

    f: Validator made sure that, if the user chooses not to select a value in the list and rather type the value manually, the entered value is validated against the underlying business logic rules. Try to change your business logic.

  • Central forms it is part of cloud creative, right? If Yes...

    .. then why can't apply logic rules when adding questions/categories? I just added a few drop-down menus and I want to apply some rules of logic for some options, but the flyout window says that logical rules are available only to paid memberships.

    Forms Central is not part of the creative cloud. You can go to https://www.acrobat.com/formscentral/en/pricing.html to sign up for membership forms Central.

  • exclude alerts for DVD players on the rules available to the logical disk space

    Hello

    I created a new rule to monitor space available in megabytes using the topology of logical disk for my windows Hosts. The rule is also trigger alerts for CD/DVD players. I need exclusion has go them of monitoring/alert. Please guide if you have an idea of how it can be ruled out starting / ignored.

    Query scope I use: LogicalDisk: host.agents.type {'Active Directory', 'ExchangeAgent', 'WindowsAgent'} with the spaceAvailable property. Alert reader DVD are ignored if I use the property capacityavailable of logical disk. But it shows the free space available in % I need.

    Return to Administration-> tooling-> Console of Script and paste the following text in the search box:

    Logical disk: (host.agents.type {'Active Directory', 'ExchangeAgent', 'WindowsAgent'}) and (detail.writable! = false)

    "Do the motion" SELECT and let us know if this succeeds.

    (It worked for me)

  • Logic and rules of the NAC

    I have a question about WINXP rules in the NAC server and more specifically, if a rule reports a failure, but it's part of a! the rule, this means - happening?  For example:

    / * Style definitions * / table. MsoNormalTable {mso-style-name : « Table Normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 à 5.4pt 0 à 5.4pt ; mso-para-marge-top : 0 ; mso-para-marge-droit : 0 ; mso-para-marge-bas : 10.0pt ; mso-para-marge-left : 0 ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ; mso-bidi-font-family : « Times New Roman » ; mso-bidi-theme-font : minor-bidi ;}

    &(!pc_Windows_ehkeyctl|pc_XP_MCE_KB973768_MS09-037) (red indicates failure)

    The NAC is reported as a check failed:

    pc_Windows_ehkeyctl, File Check [$SYSTEM_ROOT\ehome\ehkeyctl.dll is]

    It is a failure because it finds the file and there is a negative on the rule?

    What about this:

    / * Style definitions * / table. MsoNormalTable {mso-style-name : « Table Normal » ; mso-tstyle-rowband-taille : 0 ; mso-tstyle-colband-taille : 0 ; mso-style-noshow:yes ; mso-style-priorité : 99 ; mso-style-parent : » « ;" mso-rembourrage-alt : 0 à 5.4pt 0 à 5.4pt ; mso-para-marge-top : 0 ; mso-para-marge-droit : 0 ; mso-para-marge-bas : 10.0pt ; mso-para-marge-left : 0 ; ligne-hauteur : 115 % ; mso-pagination : widow-orphelin ; police-taille : 11.0pt ; famille de police : « Calibri », « sans-serif » ; mso-ascii-font-family : Calibri ; mso-ascii-theme-font : minor-latin ; mso-hansi-font-family : Calibri ; mso-hansi-theme-font : minor-latin ; mso-bidi-font-family : « Times New Roman » ; mso-bidi-theme-font : minor-bidi ;}

    &(!pc_XP_2115168_MS10-052_FileChk|pc_XP_2115168_MS10-052)

    The first part of the reports as passage, and the second reports failure... but logically, this part of the rule must pass because only after the first part?  Which apparently correct?

    Thank you!

    Gavin - Budd

    He actually reports a failure audit - and in many cases, it is expected (and confusing!).  For example, with Windows controls preconfigured, if it is a 32-bit client you will see fail the verification of 64-bit.

    Same with your second example check

    &(!pc_XP_2115168_MS10-052_FileChk|pc_XP_2115168_MS10-052)

    We expect that it is not the first cheque or spend the second control - but one of these controls will show as failed.  Clear as mud?

  • HOW TO GET THE LOGIC OF A LINUX HOST DISKS, TO CREATE RULE

    I need to create a rule to monitor some logic to a linux host, not all discs.

    Thank you!!!

    You can use a scope query something like this:

    LogicalDisk where name = '/ etc '.

    or

    LogicalDisk name in {' / ', '/ etc', "foglight"}

    or

    LogicalDisk where name match '. * tc.*'

    or

    LogicalDisk where name like '% tc % '.

    You can extend this to only certain hosts with something like this:

    LogicalDisk where name = '/ etc' and monitoredHost.name = 'abcdef1234.domain.com. '

  • At what stage of the treatment we use a rule to update to apply logic to the way the data are updated in the database?

    Hello

    At what stage of treatment do you use a rule to update to apply logic to the way the data are updated in the database?

    Rahul

    Hello Rahul,

    Update the existing record or a data object

    Thank you

    edynamic expert Eloqua

  • Incident rule does not for model OEM 12 c of the Golden Gate (12.1.0.5 window)

    Hi gurus,

    I practice OEM 12 c, I created Incident the rule for the target database Type that works well.

    Today morning, I created model extracted and Manager, GoldenGate and applied on the GG target, after created Incident rule with properties below

    Targets: Oracle GoldenGate. Oracle GoldenGate extract; Oracle GoldenGate Manager

    Article: incoming events and events updates

    Type: Alert metric (selected option button: all events of type alert metric)


    Add Action: Condition: always perform the actions

    Notice: E-mail me

    But I do not have the mail, even I kill or stop the process of mgr/extract

    When I check in the ENTERPRISE > SURVEILLANCE > INCIDENT MANAGER

    I can see the target are down and event showing her stockings.

    If someone body worked on this case. Please help me solve this problem.

    Thanks and greetings

    Jamsher Khan

    Try to use the button simulate rules in the window Incident rules.  It will show you the actions for different types of measures/events.   One thing I see here could be that the target down, will not appear in the alert metric type, this is a category of its own called target availability

Maybe you are looking for