This Alerting rule raise alerts for New EMC Isilon V8 Warning Events
This rule alerts about new warning events for EMC Isilon Nodes.
This workflow targets the EMC Isilon Cluster Node, that is based on the Network Library defined class type "Node" using SSH protocols call.
The isi command used: isi event groups list --resolved=false --format=list
Configuration:
Interval Seconds - Number of seconds between execution. Default value is 900
Sync Time - Synchronization time specified by using a 24-hour format. (Optional)
Timeout Seconds - Number of seconds before cancel execution. Default value is 300
Possible reasons for this rule for not collecting performance data:
Rule interval is either too short or too long.
Account used in Run As Profile requires execution permissions for isi command
To troubleshoot possible issues with this rule try the following:
Check if the rule interval is either too short or too long.
Check if the account used in Run As Profile got the enough execution permissions for the isi command used
| Target | EMC.Isilon.ClusterNode | ||
| Category | Alert | ||
| Enabled | True | ||
| Alert Generate | True | ||
| Alert Severity | Warning | ||
| Alert Priority | Normal | ||
| Remotable | True | ||
| Alert Message |
|
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | EMC.Isilon.V8.AllNodesEventsDS | Default |
| FilterBad | ConditionDetection | System.ExpressionFilter | Default |
| GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
Home<Rule ID="EMC.Isilon.V8.NewWarningEvents.AlertRule" Enabled="true" Target="EMC.Isilon.ClusterNode" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="EMC.Isilon.V8.AllNodesEventsDS">
<IntervalSeconds>900</IntervalSeconds>
<SyncTime/>
<SNMPAddress>$Target/Property[Type="NetworkLibrary!System.NetworkManagement.Node"]/SNMPAddress$</SNMPAddress>
<TimeoutSeconds>300</TimeoutSeconds>
</DataSource>
</DataSources>
<ConditionDetection ID="FilterBad" TypeID="System!System.ExpressionFilter">
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='Severity']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">warning</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="EMC.Isilon.V8.NewWarningEvents.AlertRule.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Property[Type="EMC.Isilon.ClusterNode"]/NodeName$</AlertParameter1>
</AlertParameters>
</WriteAction>
</WriteActions>
</Rule>