we are building a service based on parameters on different elements. On a switch element we have list of multicast addresses. What we want is an service that alarms when a specific multicast address in that list disappears, however the switch element self shouldn't alarm on those parameters. What is the best way to get this done?
One possiblity is with a service protocol that monitors the table of that switch element.
An alarm template can then be defined on that service protocol.
Another possibility is a manager element that does these checks.
A correlation rule in combination with automation might also be a possibility depending on the situation.
It all depends on the situation and the best solution varies from use case to use case.
In your case however I think the first solution might be the prefered one.