Alarms for the dhcp_response probe default to using the subsystemID 220.127.116.11. There is no way to change this within the probe itself.
Our incident routing only uses Private subsystem ID's starting with 3.4 to route alarms to the correct group in our service desk system.
I believe I can use a NAS script combined with a Pre-Processing rule to catch alarms that have a subsystemID of 18.104.22.168 and change it a different ID starting with 3.4.
How would I set this up?
First you'll want to create your script in the NAS Auto-Operator->Scripts tab. A simple example script to change the subsystem ID of an incoming event to "22.214.171.124" would be as follows:
Save the script with the filename of your choice (change_sid in this example.)
Then, in the NAS pre-processing tab, set up a profile that looks for dhcp_response alarms with the Subsystem ID 126.96.36.199, with "custom" Filter type, and choose the Custom Script you created:
This will run the script on every dhcp_response alarm from all hosts/all severities/etc, with the specified Subsystem ID and change it to what you have specified in the script.
Hope this helps!
That looks perfect. Thank you.