Dell Remote Access : System Event Log 80\% full

Dell.RemoteAccess.SNMP.RAC1017 (Rule)

Knowledge Base article:

Summary

Dell Remote Access : System Event Log 80% full

Causes

The RAC has detected that the System Event Log is 80% full.

Resolutions

Launch DRAC Console and troubleshoot further

Element properties:

TargetDell.RemoteAccess.RAC
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Dell Remote Access : System Event Log 80\% full
The RAC has detected that the System Event Log is 80\% full.

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource System.SnmpTrapEventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Dell.RemoteAccess.SNMP.RAC1017" Enabled="true" Target="DAD!Dell.RemoteAccess.RAC" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Snmp!System.SnmpTrapEventProvider">
<IP>$Target/Property[Type="DAD!Dell.RemoteAccess.RAC"]/IPAddress$</IP>
<CommunityString>$Target/Property[Type="DAD!Dell.RemoteAccess.RAC"]/CommunityString$</CommunityString>
<AllTraps>false</AllTraps>
<OIDProps>
<OIDProp>.1.3.6.1.4.1.674.10892.2.0.1017</OIDProp>
</OIDProps>
<EventOriginId>$Target/Id$</EventOriginId>
<PublisherId>$Target/Id$</PublisherId>
<PublisherName>Remote Access SNMP Agent</PublisherName>
<Channel>SnmpEvent</Channel>
<LoggingComputer/>
<EventNumber>1017</EventNumber>
<EventCategory>5</EventCategory>
<EventLevel>10</EventLevel>
<UserName/>
<Params/>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Dell.RemoteAccess.SNMP.RAC1017.Rule"]$</AlertMessageId>
<AlertParameters/>
<Suppression>
<SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>
<SuppressionValue>$Data/Channel$</SuppressionValue>
<SuppressionValue>$Data/PublisherName$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
<SuppressionValue>$Data/EventCategory$</SuppressionValue>
<SuppressionValue>$Data/EventLevel$</SuppressionValue>
<SuppressionValue>$Data/UserName$</SuppressionValue>
<SuppressionValue>$Data/EventNumber$</SuppressionValue>
<SuppressionValue>$Data/EventDescription$</SuppressionValue>
<SuppressionValue>$Target/Property[Type="DAD!Dell.RemoteAccess.RAC"]/ServiceTag$</SuppressionValue>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>