No match rule conditions

Similar Questions

• Error in BPA - the profile option 'DQM Match rule to look for' must be defin

  Hello
  
  We create the BPA for the invoice iReceivables.
  After you have created the temple, we run the preview to test the template. During this time his giving the below mentioned error.
  Kindly let me know how to proceed.
  
  The profile option 'DQM Match rule to look for' must be defined with a matching rule. Contact your system administrator
  
  Concerning
  PAKER

  You must set the profile option "DQM Match rule to look for".

  FAQ about installation and usage of profile of DQM OCO Options and credit [565905.1 ID]
  Bills presentation Architecture FAQ [ID 344350.1]

  Thank you
  Hussein

• Wildcard in the rule Condition

  Hello

  I'm trying to code a condition in the rule ability to file alarm system for the particular file systems.  I will define a particular server in the definition of the rule for the rule brought to a server and I'll add code similar to the following:

  checkDiskName = scope.get ("name")

  subjectName = null

  Switch (checkDiskName) {}

  "F:\\ExchangeLog1" - case: subjectName = "high Disk Alert - invoke Standby."
  break;
  "F:\\ExchangeLog2" - case: subjectName = "high Disk Alert - invoke Standby."
  break;
  "F:\\ExchangeMaintLog" - case: subjectName = "high Disk Alert - invoke Standby."
  break;

  default: subjectName = "high Disk Alert.

  }

  subjectName return

  (The foregoing has been truncated.)

  In other words, if the particular drive space is part of the privileged few, issues have a reminder in the subject line that the person keep must be awake, but for other drives, let him sleep.

  As you can see, it would be better to have a wildcard to do this, similar to:

  "F:\\Exchange*" - case: subjectName = "high Disk Alert - invoke Standby."
  break;

  default: subjectName = "high Disk Alert.

  This will match all the varieties like F:\\ExchangeLog5 and F:\\ExchangeMaintLog.  (For your information, the file systems appear within Foglight like F:\ExchangeLog3 etc.).

  Is this possible?

  Thanks in advance

  Brian

  Hello

  I would use a simple if-then-else here, but you can also use a regex in a switch

  Switch (checkDiskName) {}

  case ~ / F:\\Exchange.*/: 'high drive alert - call Standby' break;

  default: subjectName = "low"; break;

  }

  See you soon

  Nils

• Wildcards in rule conditions

  I have several virtual machines that I know will never get VMware tools installed, so I want to remove them from the alarm. I managed to get the rule work if I add ' | '. (scope.get ("name") is "LXACS001") "the condition of" VMW Machine virtual VMware Tools. However, I don't really want to set up 4 different conditions to the IF statement. Someone can you please tell me how I can use a wildcard character (or there may be a better way to do)? I want something like: ' | ' (scope.get ("name") '% LXACS') ».
  Thank you!!

  in your field of application of the rule, you could do the following:
  VMWVirtualMachine where name! like '% LXACS '.
  -Larry

• Looking for an example of a rule FMS to the process that matches LogFilter

  Hello

  am looking for an example of a rule that manages different LogFilter matches?

  I installed a handful of filter string matches a logfilter officer and was looking for an example rule that could read the Message string for the user and manage each matching filter separately.

  So, I would have 4 match of different styles in an agent instance filter a log and would manage each game separately.

  The only rule of type existing LogFilter I found on the system had what is stated below in the part of the rule Condition:

  checkObservationAlarms (#LogFilter_ErrorVerbose to 1ms #,)

  {the entry->

  If (entry.get ("Severity") == "WARNING") {}

  return 2;

  }

  If (entry.get ("Severity") == 'CRITICAL') {}

  return 3;

  }

  If (entry.get ("Severity") == "FATAL") {}

  return 4;

  }

  return 0;

  },

  {entry, severity-> {switch (severity)}

  case 2:

  return "" + entry.get ("LogName") + ":" + entry.get ("Error_Message") + ""; ""

  case 3:

  return "" + entry.get ("LogName") + ":" + entry.get ("Error_Message") + ""; ""

  case 4:

  return "" + entry.get ("LogName") + ":" + entry.get ("Error_Message") + ""; ""

  by default:

  Return ' ';

  }}, "542c111ff5feabe3803bccb722386cae") () .size > 0;

  ----

  But I don't know if I need to change it it seems to be some sort of standard boilerplate for this type of rule.

  I need to be able to key off the field to the user Message.  So even if I have 1 rule for each 4 journal of my agent logfilter properties filter models, it's ok.  I just need to understand how to do a test for the rule based on the user Message field values or extends its reach to this particular user Message string.

  I'll post a picture of the logfilter message strings.

  So I would look on the way to have a fair rule match the logfilter agent when the returned string is "ECG_Java_Memory_Error", then I would have another rule for each of the other models in the returned string.

  Looking for an example of a standard type.

  Thank you

  "mark".

  It is the major brand

  David Mendoza

  Foglight Consultant

• Differences when matching of certificate rules.

  Hello, im setting up an ASA5540 as an IPSec VPN concentrator.

  I would like to know what is the difference between the use of the corresponding configuration certificate by default, which is to keep the disabled rules and corresponding strategy group certificate which indicates to use the value of the OU in the unique name of the object (DN).

  no rule to enable yunnel-Group-map<-- (default="">

  tunnel-group card activate or<-- (default="">

  Or activation of rules and specifying a matching rule that matches exactly OR attribute (example grouptest):

  no tunnel-Group-map activate or

  tunnel-Group-map enable rules

  !

  1 ca encryption certificate card

  name of the object attr or eq grouptest

  With the default configuration, the match succeeds always. But when I activate the rules and try to match the OU manually, correspondence always fail.

  I included an excerpt from the client certificate subject:

  Object cn = ABCD

  usertest, or = GROUPTEST, o = XYZ.test

  Transmitter

  o = XYZ.test

  Kind regards.

  When you use IPSec with certificates, peer send the meesages IKE IKE identity with the host name, not the IP address. Therefore, you need a group of tunnel matching the hostname that is sent in the IKE messages.

  If you want to match all the settings in the certificates, and then apply you the rules of tunnel-group and certificate card. Let's say you need match the 'IP address' in the certificate. You set a certificate corresponding to the IP address card and then create a tunnel-group that is mapped to the certificate card.

  Please, use the following command to map the certificate to map to your custom tunnel-group.

  Tunnel-Group-map

  Regarding

  Kings

• How to set the condition of rule to check the Primary Key, Foreign Key and Unique

  I use Oracle 10.2
  Could someone tell me please how to set the rule condition to check the primary key, foreign key constraint of uniqueness?

  Hello

  Primary key, unique constraints and foreign key are better applied using the native functionality of database constraint. If you like the rules to check if a key exists at the time of the evaluation, you can use a function defined by the user in a rule condition and this function can ask to turn the table keys.

  Hope this helps,
  -Aravind.

• Add LogFilter match string for the subject line of the e-mail notification

  Hello

  On the LogFilter alerts, I add the matching string in the subject line of the e-mail logfilter alert notification. I followed KB 75058 for this requirement. But I'm getting other data also with the match string. Please find the attached screenshot. The chain is marked in yellow. I don't need data which is marke red din. Can you let me know if a setting can be done in the script that retrieves the hitstring so that only the histstring appear

  FMS: 5.6.4

  Kind regards

  Roshan.

  Additional accessories:

  • HitString.txt.zip
  • Logfile.PNG

  Hi Roshan

  We do something similar.  We have configured a Message appropriate for each matching string user:

  

  Then, in the rule Condition, I created an expression UserError containing the following:

  def controls = checkObservationAlarms (#LogFilter_ErrorVerbose to 1ms #,)

  {the entry->

  If (entry.get ("Severity") == "WARNING") {}

  return 2;

  }

  If (entry.get ("Severity") == 'CRITICAL') {}

  return 3;

  }

  If (entry.get ("Severity") == "FATAL") {}

  return 4;

  }

  return 0;

  },

  {entry, severity-> {switch (severity)}

  case 2:

  Return entry.get ("User_Message");

  case 3:

  return "" + entry.get ("User_Message") + "";

  case 4:

  return "" + entry.get ("User_Message") + "";

  by default:

  Return ' ';

  }}, @foglight_rule_id);

  If (checks.size () > 0) {}

  return checks [0] [1];

  } else {}

  Return ' ';

  }

  By referencing @UserError in the subject line, I get the Message to the appropriate user.

  I also do a similar thing for the severity of error appropriate in my subject line.

  Hope this helps

  Brian

• vFoglight rule not pulling

  I created a rule to monitor several VM and alert if ever, they move from their designated hosts. When I put the script of condition in the "Run Query Condition" it runs the code with success and returns 'True' or 'false' However the rule does not generate an alarm. I broke the rule returns "true" as shown below and checking that the rule is active. Any help would be great

  The script takes the name of the virtual machine and splits the name where "vgw" and then puts the back with "esx" name in name. He uses this name to compare with the name of the esxServer /, if they are different, then the script should return true and set off an alarm. (for the test I put the script returns true if esxServer name matches the string that I created)

  example: mynamevgw001--> mynameesx001

  VM = scope.get ('name')

  esxhost = scope.get('esxServer/name')

  myArray = vm.split ('vgw')

  myString = "esx".

  esxhostcompare = myarray [0] + mystring + myarray [1]

  If (esxhost is esxhostcompare)

  Returns true;

  Thank you

  After working with support, we found that the rules 'Data Driven' will not draw if there is no data measures in the rule condition. In my article, I used only the properties of the object of topology VMWVirtualMahine.

  The two options that I would need to do to make the fire rule is:

  1. define rule driven time, then select fire without data option

  or

  2 Add a metric of observation to the condition

  VM = scope.get ('name')

  myUP = #uptimePercent #.

  esxhost = scope.get('esxServer/name')

  myArray = vm.split ('vgw')

  myString = "esx".

  esxcompare = myarray [0] + mystring + myarray [1]

  If (esxhost == esxcompare) return true;

  otherwise return false;

• sequential rule execution?

  I documented 2 rules in a project I wanted to run sequentially. I mean rule 1 to run first, and then if a rule matches 2 condition should be run please let me know how to achieve this.
  
  For example
  
  If corresponds to the State 1, and then run the rule 1 and if condition 2 matches run rule 2 another run both sets 1 and 2.
  
  Published by: 870005 on July 3, 2011 23:01

  870005 wrote:
  Stephan thnx for answer...

  I write the rules for calculating the rights of a person once he retired. So, there are two types of Pension rights and compensation based on the period of service. Please see the example below

  1. the rule has 3 attributes end of reason of service (EOS), period of service (POS) and rights

  2. for EOS normal retirement = the person gets only remuneration if POS< 15="">

  3. for EOS = Normal Retirement the person gets only pension if 15 > = POS<=35>

  4. for EOS normal retirement = the person gets both pension as well as compensation (only for the additional years, he served more than 35 years

  Please note that the formulas for the calculation of pensions and remeneration are different.

  Actually you need not sequential rules for this

  the person gets remuneration if
    Either
      POS < 15
    OR
      POS > 35
  
  the person get pension if
    POS >= 15
  

  If the "EOS = Normal Retirement" is important that can be added to

  Another thing that might help is that's not strictly true that there is no order of execution. If you use a rule of table (be it in word or Excel) table rule performs first line to last in order. Then you could also write the rule rule in the table

  | Condition                | Condition  | Condition | person is eligible for renum. | person is eligible for pension |
  |--------------------------------------------------------------------------------------------------------------------|
  | EOS is normal retirement | POS < 15   |           | TRUE                          | FALSE
  | EOS is normal retirement | POS >= 15  | POS <= 35 | FALSE                         | TRUE
  | EOS is normal retirement | POS > 35   |           | TRUE                          | TRUE
  |--------------------------------------------------------------------------------------------------------------------|
  |                                              else | FALSE                         | FALSE                          |
  

  However, these rules can be written without the need of order.

• 5.8.1 infrastructure cartridge - create rule for 'availablePagingSpace '?

  I have a number of AIX systems monitored by using the cartridge of the Infrastructure.  I copied and modified the rules for the CPU, the ability to file systems and memory.

  I need to create a rule to alert on 'availablePagingSpace' that appears on the chart "Memory usage" when I click on the "Paging Space" graph via the Host Monitor dashboard.

  I'm assuming that I could copy the rule "Utilziation memory" and likely the condition to test insteead 'availablePagingSpace' of the 'use '.   This seems to be a false assumption.  When you use the rule condition query interface, these are the errors I get.

  com.quest.nitro.service.sl.interfaces.scripting.ScriptingException: com.quest.nitro.service.sl.interfaces.scripting.ScriptMalformedQueryException: bad request: java.lang.IllegalArgumentException: Type ' foglight - 5:Memory:8' doesn't have a property with the name "availablePagingSpace" - start of the script - #availablePagingSpace #.< 100="" ----="" script="" end="">

  I tried to change the rule definition to use different topologies, such as "ICAGENT", but I can't seem to find this property available anywhere.

  I'm still a bit of a newbie to the rule editing Foglight, so bear with me.  If someone has a pointer in the right direction for me on how to access the "availablePagingSpace" metric, so I can use in my terms of rule, I would be very grateful.

  Thank you!

  GWL-

  Hello

  Please try this on a local Foglight Server first.

  When you look at the gauge for swap space available in the dashboard you can see that it is actually taken from the host itself

  

  If the scope of the rule should be the host itself, not memory.

  The easiest way is to seek a similar rule with the host as the scope.

  If you copy the rule run the length of queue for example, you can see that the scope of the rule is host.
  You can then change the rule condition to and when you use the condition Editor, you can see the metric of availablepagingspace as part of the host

  

  I hope this helps...

  Golan

• Create a rule / older instant alarm

  Hello

  I am creating a rule / alarm, this updated fire for snapshots when have more than X days.

  I use the topology: VMWareSnapshot.

  Using an adaptation of the function to create the older snapshot report, I tried to create the rule.

  creationSnapshot = scope.creationTime.getTime ();

  now = new Date () .getTime ();

  diffHours = (now - creationSnapshot) / 3600000;

  diffDays = diffHours 24;

  (diffDays > = registry ("VMW:Old.) Snapshot.Warning'));

  When I test the condition in the script console, and in the rule condition, it works fine, but when the rule never fired.

  I forgot something?

  Thanks for any help or ideas

  Kind regards

  Alexander Ortiz

  Strategic Solutions Consultant

  Reference Dell | MCLA APM software, group

  Office + 57 312 568 4791, mobile + 57 312 568 4791
  E-mail [email protected]

  Hi Alex

  Yes, I'll try

  The rule definition:

  

  Only the State of alert is enabled:

  Condition

  Article: vBundle-1 VM Snap Shot age

  First - check VM list ignore

  Second - check VM has Snap Active

  Check the third - instant age

  List skip from reading the registry

  def IgnoreList is registry ("vBundle.vm.snapshot.age.ignore.list");.

  Get the name of VM

  def VMName1 = scope.get ("name");

  def boolean found = false;

  If (IgnoreList! = null) {}

  Found = IgnoreList.contains (VMName1) ;}

  If (found) return false;

  Check if the virtual machine has a snapshot active

  if(Scope.currentSnapshot == null) {}

  return false}

  Estimate the age of the snapshot

  def NumOfDays is registry ("vBundle.vm.snapshot.age.warning.days");.

  try {}

  creationTime = scope.currentSnapshot.get("creationTime").getTime ();

  If (creationTime == null) return false;

  now = new Date () .getTime ();

  diffHours = (now - creationTime) / 3600000;

  diffDays = diffHours 24;

  If (diffDays > = NumOfDays)

  Returns true;

  Otherwise, return false}

  catch (System.Exception e) {return false ;}

  Alarm message:

  [Warning] Virtual Machine: '@VMName' has a named snapshot: '@SnapshotName', it is longer than @WarningDays days. Remove the old clichés.

  There is no variable defined severity level.

  The Action is an EmailAction:

  mail.message

  VM (@VMName) has a snapshot that is @WarningDays the old days

  Discovers the alarm to: @foglight_rule_alarm_link

  mail. Subject

  [Warning] VM (@VMName) has an old cliché

  Behavior:

  

  Rule variables:

  Expression CriticalDays return register ("vBundle.vm.snapshot.age.critical.days");

  Expression FatalDays return register ("vBundle.vm.snapshot.age.fatal.days");

  Expression Nom_snapshot scope.currentSnapshot.name;

  VMName expression return scope.get ("name");

  Expression WarningDays return register ("vBundle.vm.snapshot.age.warning.days");

  Registry settings:

  vBundle.vm.snapshot.age.ignore.list

  

  vBundle.vm.snapshot.age.warning.days

  

  The days of warning STANDARD are 7 (Disclaimer), 14 (critic) and 30 (fatal).

  I hope this is clear for you

  If you want the critical and Fatal situation, let me know.

  Brian

• vFoglight alert rule do not behave properly

  Hello

  I would like to create what I would think that should be a relatively simple rule, here are the details, if anyone can help that would be great.

  1. The rule must include only the virtual machines VMware than that name meet a specific criterion, i.e. 'maintenance -' (see screenshot 'definition of the rule')
  2. The rule should warn if the CPU reaches of varying levels, either warning 60, 70 for criticism etc. (see the attached screenshot "rule conditions").

  Here is what I expected to happen...

  The first must restrict the scope of the rule only the virtual machines that meet this criterion. If I check the box 'validate the scope of the rule' green in this section, it shows me a list of these virtual machines with this name. Large.

  The second point should then take these extended virtual machines and watch the CPU usage and compare that to the threshold defined in the registry variable.

  Regarding the screenshot 3 (alerts rule) - the first problem is that I get alerts for virtually all of the virtual machines, so it is ignoring the scope.

  The second issue is that it does not notice the severity level, so it's just alert for regardless of whether it reaches the threshold. All strangely I actually disabled the alarm 'WARNING' so it should be for this type of event be alert.

  Any advice would be very welcome. Or is there a better way to do what im aiming to do that would be fantastic.

  Thank you

  Additional accessories:

  • Rule Conditions.PNG
  • definition of the rule. PNG

  If you reboot the host and disable the alarms should fire on the virtual machines in the scope.  There is a bug that basically the rule sticks in memory and is not updated correctly.  Last I looked there is a fix on that provided for 6.6.2 (Core 5.6.4)

• Rule hides the search fields

  I have a comprehensive rule to reduce the fields of metadata users see. I was tripping on the conditions originally but had so I found it easier to remove them all, however I realized that the only rule of information is also applied to the fields in the advanced search screen, what is the dpEvent for research please, so I can out - screen or even create a rule so that users can search only on relevant metadata elements.

  Martin

  Hi Martin,

  You can use ((dpAction like 'Search')) in the activation of rule condition, so it is applied to the search form.

  HTH

  -Anand

• OEDQ-UCM: Match individual real time does not

  Hello

  We have created personalized for the individual and entity matching rules and added custom fields (which are used to match) in the fields of the seller for account and Contact deduplication parameter. We tested the rule through web services in real time and that they work as expected.

  To account when we create a record in duplicate in the user interface, based on the new rule to match the popup comes with the score. But for the Contact it does not work. We have one rule for Contact match in which if is a field (say A field) is a match. But through the user interface, we can create duplicate with the same values in the to field.

  In the sdq Connector log, I can see pilot records and records of candidates are passed to OEDQ.

  March 17, 2015 23:13:59 [11796526]: sdq_init_session

  March 17, 2015 23:13:59 [11796526]: return of sdq_init_session from 432685954

  March 17, 2015 23:13:59 [11796526]: sdq_set_parameter 432685954 < data > < parameter > < name > RECORD_TYPE < / name > < value > contactmatch < / value > < / parameter > < parameter > < name > clusterlevel < / name > < value_2 > < / value > < / parameter > < parameter > < name > matchthreshold < / name > < value > 70 < / value > < / parameter > < / data >

  March 17, 2015 23:14 [11796526]: sdq_get_dedup_keys 432685954 < data > < DriverRecord > < mobilephone > < / portable > < faxphone > < / faxphone > < dob > 05/03/1979 < / dob > < email > [email protected] < / email > < uid1 > EMIRMUR < / uid1 > < FGBFullName > Murali Katikk < / FGBFullName > < uid2 > PSPRTMUT < / uid2 > < FGBPassportExpDate > 03/06/2017-00:00:00 < / FGBPassportExpDate > < firstname > MURALI < / firstname > < individualid > 1 - DAY2 < / individualid > < lastname > KARTIKK < / lastname > < middlename > < / middlename > < jobtitle > < / jobtitle > < alternatephone > < / alternatephone > < City > < /. City > < Address1 > < / address1 > < / DriverRecord > < / data >

  March 17, 2015 23:14:01 [11796526]: sdq_dedup_realtime 432685954 < data > < parameter > < name > RECORD_TYPE < / name > < value > contactmatch < / value > < / parameter > < parameter > < name > clusterlevel < / name > < value_2 > < / value > < / parameter > < parameter > < name > matchthreshold < / name > < value > 70 < / value > < / parameter > < / data > < data

  > < DriverRecord

  > < mobile phone

  > < / mobile phone

  > < faxphone

  > < / faxphone

  > < dob

  > 05/03/1979 < / dob

  > < Email

  > [email protected] < / email

  > < uid1

  > EMIRMUR < / uid1

  > < FGBFullName

  > Murali Katikk < / FGBFullName

  > < uid2

  > PSPRTMUT < / uid2

  > < FGBPassportExpDate

  > 03/06/2017-00:00:00 < / FGBPassportExpDate

  > < first name

  > MURALI < / name

  > < individualid

  > 1 - DAY2 < / individualid

  > < name

  > KARTIKK < / lastname

  > < middlename

  > < / middlename

  > < jobtitle

  > < / jobtitle

  > < alternatephone

  > < / alternatephone

  > < City

  > < / City

  > < address1

  > < / address1

  > < / DriverRecord

  > < CandidateRecord

  > < Email

  > [email protected] < / email

  > < first name

  > MURALI < / name

  > < individualid

  > 1 - DAWX < / individualid

  > < name

  > KARTIK < / lastname

  > < / CandidateRecord

  > < CandidateRecord

  > < Email

  > [email protected] < / email

  > < first name

  > MURALI < / name

  > < individualid

  > 1 - DAXD < / individualid

  > < name

  > KITENGE < / lastname

  > < / CandidateRecord

  > < / data

  >

  Can I see any newspaper OEDQ to check what is causing the problem? where could I find it? If I run AAU Batch Manager job too, records become Source_inserted, with no results in S_DEDUP_RESULT. It works when I test the web service. I am new to AAU and OEDQ. Ask for to provide you assistance on this.

  Thank you

  ALIOU

  Hi Liam,

  Check objects integration ["Contact Dedup IO" and "Account Dedup IO"] and the [deduplication] Business Services using Siebel tools.

  Then in Siebel, update data cards to bind the fields in the UCM IO to DQ IO.

  Kind regards

  Nick