Hi All,
Please help me on this. Correcting the logic the Rubrik follow.
We have different backup jobs scheduled in Rubrik. It manages the job queue and each job is picked up by one of the available nodes in the cluster. If the job fails, it is put back to queue and picked up by another node to process and continues if fails again.
For each failure at respective node, we get a trap. That means, if the job is picked up by 3 nodes and failed to complete, we get 3 traps and in turn 3 alarms.
We have one event mapped to the rubrik trap to generate the alarm. As the trap is coming from multiple nodes for same issue at different intervals when the respective job runs, we are getting the same alarm on all the nodes at respective trap generation intervals. Is it possible to correlate them and generate the alarm on correlation domain or one of the nodes. Also, please clarify me on the below.
Is it possible to make a single event as a symptom and cause as we have only one event that generates the alarm with no clear event? When I enabled condition correlation on this event as symptom and cause, even if there is a single alarm, it is hiding the alarm with the below event message.Please provide some insight.
------------------------------
Thank you.
Rajashekar
------------------------------
Original Message:
Sent: 02-11-2020 08:24 AM
From: Rajashekar Allala
Subject: Correlate Events and generate Single Alarm - CA Spectrum
@Joseph Ackley please clarify the below.
Is it possible to make a single event as a symptom and cause as we have only one event that generates the alarm with no clear event? When I enabled condition correlation on this event as symptom and cause, even if there is a single alarm, it is hiding the alarm with the below event message.
Please provide some insight.
------------------------------
Thank you.
Rajashekar
Original Message:
Sent: 02-06-2020 10:23 AM
From: Rajashekar Allala
Subject: Correlate Events and generate Single Alarm - CA Spectrum
Hi Joseph Ackley, any help here please.
------------------------------
Thank you.
Rajashekar
Original Message:
Sent: 02-05-2020 08:47 AM
From: Rajashekar Allala
Subject: Correlate Events and generate Single Alarm - CA Spectrum
Rubrik admin can adjust the time for the jobs that send these traps.
Also, how can make a single event as a symptom and cause as we have only one event that generates the alarm. When I enabled condition correlation, even if there is a single alarm, it is hiding with the below event message.
Please provide some insight.
------------------------------
Thank you.
Rajashekar
Original Message:
Sent: 02-05-2020 08:17 AM
From: Joseph Ackley
Subject: Correlate Events and generate Single Alarm - CA Spectrum
That much time between alarms will probably not work for you with the Condition Correlation.
Is there any way to sync the checking of the status?
Joe
Original Message:
Sent: 02-04-2020 06:36 AM
From: Rajashekar Allala
Subject: Correlate Events and generate Single Alarm - CA Spectrum
Thank you Joe. I observed that, the trap/event/alarm generation from two different sources is having a delay of min 1 hour as they check the status in different intervals. In that case, will the condition correlation help?
------------------------------
Thank you.
Rajashekar
Original Message:
Sent: 01-28-2020 02:26 PM
From: Joseph Ackley
Subject: Correlate Events and generate Single Alarm - CA Spectrum
You should be able to use Condition Correlation to correlate to a single alarm.
That alarm would be the root cause alarm and the other would be symptom alarms.
Then use the Alarms tab to filter and display only root cause alarms.
Joe
Original Message:
Sent: 01-27-2020 10:39 AM
From: Rajashekar Allala
Subject: Correlate Events and generate Single Alarm - CA Spectrum
Hi All,
We have rubrik cluster forwarding traps from multiple appliances to Spectrum for the same issue and getting multiple alarms.
Example: Backup Failed for one of the SQL DB, rubrik manages the status of the same from multiple nodes in the rubrik cluster and generates the traps to Spectrum.
Is it possible to correlate all of the events generated from different sources in the cluster and generate only one alarm? Please suggest.
------------------------------
Thank you.
Rajashekar
------------------------------