Hi DOJO,
I'm trying to create a correlation rule that sends an email when an agent is lost. To achieve this, I monitor the information events from the DataMiner Element Control Protocol, specifically looking at the parameter Agent lost.
However, during testing in the Dev environment, where I manually stop an agent, the rule doesn't seem to be triggered, and the email is not sent.
Could you please advise whether there might be an issue with my configuration? Or is the DataMiner Element Control Protocol not compatible with correlation rules?
Kind regards,
Hi Ive,
Yes, I have tried with Trigger on single events, and the result is the same. The email is not sent.
Actually, in the SLCorrelation log of the agent that remains up, we have the following when the other goes down:
2025/07/15 14:59:35.008|SLNet.exe|Log|INF|5|46|Removed subscribed client: SLNet on SLC-H71-G06 (76BDB6C4068742FFB0ADB9951CB466EE; remote DMA ID: 793)
Hi Caterina,
By default, Correlation rules don't accept information events. Have you enabled this in the details section just below the name of the rule?
Also, is there a reason you use a condition and don't add the parameter filter to the filter section?
Hi Matthijs,
It was in fact that, I forgot to enable the rule to accept information events.
Now the rule works, thank you!
Hi Catarina,
Did you try and check the "Trigger on single events…" checkbox below your alarm filter?