Creating Missing Event Rules
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Creating Missing Event Rules

 
Post new topic   Reply to topic    Windows Server Forum Index -> MOM
Author Message
Ryan Baldwin
Guest
Posted: Mon Jan 17, 2005 6:14 pm    Post subject: Creating Missing Event Rules Reply with quote
Does anybody know if it's possible to create a missing event rule that
depends on another event rule? For example, I have an event that's fired in
my application and I typically expect another event to fire within 5 minutes
of the first event. Is it possible to create a missing event rule that
checks to see if that second event isn't fired within, say, 45 minutes of
the first event?

I suppose this would presume that the two events would be logically linked,
which I'm not sure is supported by MOM 2005 and/or is of a healthy design.

Any ideas?

Thanks in advance.
Back to top
Murugesan Vivekananthan [
Guest
Posted: Mon Jan 17, 2005 7:24 pm    Post subject: Re: Creating Missing Event Rules Reply with quote
Your Scenario:
After the first event [say e1] occurs
1. No Event[say e1 within 5 minutes
2. One more event[say e1] withing 5 minutes

This can be achieved using:
1. Consolidation rule. Set the consolidation event rule criteria to the
event you want to monitor [say e1] and set the consolidation time frame to 5
minutes.
2. Event Rule: Set the event rule criteria to the event you want to monitor
[say e1]. Also add a repeat count criteria of "2".


--
---------------------------------------------------------
Murugesan Vivekananthan [MSFT]
MOM Test Team

This posting is provided "AS IS" with no warranties, and confers no rights.
---------------------------------------------------------
"Ryan Baldwin" <rbaldwin@point2.com> wrote in message
news:eOOFWmL$EHA.3368@TK2MSFTNGP10.phx.gbl...
Quote:
Does anybody know if it's possible to create a missing event rule that
depends on another event rule? For example, I have an event that's fired
in my application and I typically expect another event to fire within 5
minutes of the first event. Is it possible to create a missing event rule
that checks to see if that second event isn't fired within, say, 45
minutes of the first event?

I suppose this would presume that the two events would be logically
linked, which I'm not sure is supported by MOM 2005 and/or is of a healthy
design.

Any ideas?

Thanks in advance.
Back to top
Ryan Baldwin
Guest
Posted: Tue Jan 18, 2005 9:21 pm    Post subject: Re: Creating Missing Event Rules Reply with quote
Thanks for your help Murugesan, however I'm a little confused. I don't see
how there's a way for me to raise an alert should that second event *not*
enter into the system.

For example:
E1 with an event no. of 100, with param1 = 500 and param2 = "hello" is
fired.
E2 with an event no. of 100, with param1 = 500 and param2 = "world" is fired
within 5 minutes of E1. This is healthy.

E1 with an event no of 100, with param1 = 600 and param2="hello" is fired.
E2 with an event no of 100, with param1 = 600 and param2="world " is never
fired. <- Ideally this should fire an alert or something after xx number of
minutes of the rule not being "fulfilled".

I can create a consolidated event rule based on the event num and param1,
however I can't (that I'm aware of) fire an alert or anything should that
consolidated event rule not be fulfilled after a certain period of time.

Am I correct in my understanding that the above is not possible in MOM 2005?

Thanks again for all your help.

- ryan.

"Murugesan Vivekananthan [MSFT]" <vivekm@online.microsoft.com> wrote in
message news:%23RQPZcM$EHA.2112@TK2MSFTNGP14.phx.gbl...
Quote:
Your Scenario:
After the first event [say e1] occurs
1. No Event[say e1 within 5 minutes
2. One more event[say e1] withing 5 minutes

This can be achieved using:
1. Consolidation rule. Set the consolidation event rule criteria to the
event you want to monitor [say e1] and set the consolidation time frame to
5 minutes.
2. Event Rule: Set the event rule criteria to the event you want to
monitor [say e1]. Also add a repeat count criteria of "2".


--
---------------------------------------------------------
Murugesan Vivekananthan [MSFT]
MOM Test Team

This posting is provided "AS IS" with no warranties, and confers no
rights.
---------------------------------------------------------
"Ryan Baldwin" <rbaldwin@point2.com> wrote in message
news:eOOFWmL$EHA.3368@TK2MSFTNGP10.phx.gbl...
Does anybody know if it's possible to create a missing event rule that
depends on another event rule? For example, I have an event that's fired
in my application and I typically expect another event to fire within 5
minutes of the first event. Is it possible to create a missing event
rule that checks to see if that second event isn't fired within, say, 45
minutes of the first event?

I suppose this would presume that the two events would be logically
linked, which I'm not sure is supported by MOM 2005 and/or is of a
healthy design.

Any ideas?

Thanks in advance.


Back to top
Murugesan Vivekananthan [
Guest
Posted: Wed Jan 19, 2005 1:38 am    Post subject: Re: Creating Missing Event Rules Reply with quote
Quote:
1. Consolidation rule. Set the consolidation event rule criteria to the
event you want to monitor [say e1] and set the consolidation time frame
to 5 minutes.
Above Rule Functionality:

1. The rule will be idle, if there is no event.
2. Lets assume that there is an event e1 at 1:00PM. Now the consolidation
rule will be triggered and will be watching for further e1 events for next 5
minutes.
Case 1: 1 more e1 in next 5 minutes -- The Consolidation Rule will increment
the Repeat Count by 1
Case 2: No more events in next 5 minutes -- No changes
3. At the end of 5 minutes, the same event e1 will be sent with the correct
repeat count data [2 -- for Case1] [1 -- for Case2]

Thus you can configure the Event Rule to have both the Repeat Count=2 and
Repeat Count =1 Criteria.

Limitations:
The Consolidation rule is inactive during the time when there is no event.
It becomes active only after the first event is raised. Thus you can't use
this as a missing event rule. But looking at your scenario the consolidation
rule can solve the issue.


--
---------------------------------------------------------
Murugesan Vivekananthan [MSFT]
MOM Test Team

This posting is provided "AS IS" with no warranties, and confers no rights.
---------------------------------------------------------
"Ryan Baldwin" <rbaldwin@point2.com> wrote in message
news:uJ7F4FX$EHA.2568@TK2MSFTNGP11.phx.gbl...
Quote:
Thanks for your help Murugesan, however I'm a little confused. I don't
see how there's a way for me to raise an alert should that second event
*not* enter into the system.

For example:
E1 with an event no. of 100, with param1 = 500 and param2 = "hello" is
fired.
E2 with an event no. of 100, with param1 = 500 and param2 = "world" is
fired within 5 minutes of E1. This is healthy.

E1 with an event no of 100, with param1 = 600 and param2="hello" is fired.
E2 with an event no of 100, with param1 = 600 and param2="world " is never
fired. <- Ideally this should fire an alert or something after xx number
of minutes of the rule not being "fulfilled".

I can create a consolidated event rule based on the event num and param1,
however I can't (that I'm aware of) fire an alert or anything should that
consolidated event rule not be fulfilled after a certain period of time.

Am I correct in my understanding that the above is not possible in MOM
2005?

Thanks again for all your help.

- ryan.

"Murugesan Vivekananthan [MSFT]" <vivekm@online.microsoft.com> wrote in
message news:%23RQPZcM$EHA.2112@TK2MSFTNGP14.phx.gbl...
Your Scenario:
After the first event [say e1] occurs
1. No Event[say e1 within 5 minutes
2. One more event[say e1] withing 5 minutes

This can be achieved using:
1. Consolidation rule. Set the consolidation event rule criteria to the
event you want to monitor [say e1] and set the consolidation time frame
to 5 minutes.
2. Event Rule: Set the event rule criteria to the event you want to
monitor [say e1]. Also add a repeat count criteria of "2".


--
---------------------------------------------------------
Murugesan Vivekananthan [MSFT]
MOM Test Team

This posting is provided "AS IS" with no warranties, and confers no
rights.
---------------------------------------------------------
"Ryan Baldwin" <rbaldwin@point2.com> wrote in message
news:eOOFWmL$EHA.3368@TK2MSFTNGP10.phx.gbl...
Does anybody know if it's possible to create a missing event rule that
depends on another event rule? For example, I have an event that's
fired in my application and I typically expect another event to fire
within 5 minutes of the first event. Is it possible to create a missing
event rule that checks to see if that second event isn't fired within,
say, 45 minutes of the first event?

I suppose this would presume that the two events would be logically
linked, which I'm not sure is supported by MOM 2005 and/or is of a
healthy design.

Any ideas?

Thanks in advance.




Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> MOM All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB