Setting delay on writing events on NOTIFIER.OUT log, is this possible?

[Martin Del Toro]

Hi team, 
We have been requested to set up a delay of about 5 minutes on the writing of the events on the NOTIFIER.OUT log file.
Is this possible?

[Raphael Franck]

Hi Martin,

maybe "Age Time" is what you're looking for: https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/10-4-2/managing-client-applications/spectrum-alarm-notification-manager-sanm/create-an-alarm-notification-policy.html


Mit freundlichen Gruessen - Yours sincerely

Raphael Franck
Designer
Global Managed Services

Computacenter AG & Co oHG

www.computacenter.com/de | Twitter | LinkedIn | YouTube | Xing

-----Ursprüngliche Nachricht

[Joseph Ackley]

Martin,

Use the Spectrum Alarm Notification Manager (SANM) to create filter(s) and age the alarm.

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/10-4-2/managing-client-applications/spectrum-alarm-notification-manager-sanm.html

Joe

[Martin Del Toro]

Thanks for the prompt answer.
This will make the alarm to delay on be wrtten on the NOTIFIER.OUT log file, right? we will still be able to see the alarm on the alarm view at the exact time it was triggered by Spectrum, right?
And I guess, if we set up for 5 minutes, if an alarm comes, and does not lasts more than 5 minutes, this alarm will not be writted on the NOTFIER.OUT log file, right?

[Joseph Ackley]

Martin,

You are correct in all assumptions.

Joe

[Martin Del Toro]

Thank you both for the answer.
It worked well.
We have setup an age time of 5 minutes. 
And the filter is disregarding any alarm that last less than 5 minutes, which is ok, as we are using what is written on the notifier, to integrate Spectrum with Splunk.

[Joseph Ackley]

Martin,

I am glad I was able to assist.

Joe