A user would like to use a correlation rule to trigger when some elements of a specific location are being renamed.
When an element is renamed in DataMiner an information event is generated like the below, but unfortunately, the element property "Location Name" is empty. (Note that the element property is filled in for the information event when a client connects to the element card).
Although the element property cannot be used for an alarm filter, the above information event can be matched with an alarm filter like the below.
However, this correlation rule also triggers for enhanced services being renamed. In the below, you'll see that the information event when renaming the enhanced service has Element Type = DMS Service, whereas the information event for renaming the element has Element Type = DMS Element.
Unfortunately, when I add the Element type field to my alarm filter, it lists the element types of the protocols on the DMS and it does not contain DMS Element or DMS Service.
So, I have two questions :
- can I use the value of element property in the alarm filter to trigger on an information event when the element is renamed?
- (if not the above is not possible), can I use the column 'Element Type' in my alarm filter?
Thanks!
Hi Jan-Klaas,
- As the filters you use are alarmfilters, you can only use the properties which are present in the alarm. As the property "Location name" is empty, you can not use it to check it on a value (only the "empty" value will give a match).
2. You can use the "Element Type" in your alarm filter. Instead of selecting "Equal to" you can select "matches wildcard expression" and in the value you can add "DMS Service" or "DMS Element".
Thanks! I used the “Element Type” with a wildcard expression and this is working. I also had to add a condition that the “value” should not be ‘by DataMiner’. That’s because there are two information events (one with ‘DMS Service’ and one with ‘DMS Element’) when an enhanced service is renamed. I missed that in my original investigation. The one with ‘DMS Element’ always seems to have the value ‘by DataMiner’, so filtering this out ultimately produced the desired results.
Thanks again!