How to exclude an alarm from being gendered based on certain string in alarm message in spectrum.

[Rohit Kumar]

Hi there,

I want to exclude alarm based on certain string in alarm massage body. For example, i want to exclude an alarm from being generated if alarm message body has string /var/rubrik/,  

 

Any help is highly appreciated.

Regards
Rohit

[Joseph Ackley]

Rohit,

On the initial event, use an Event Condition rule on the event variable (varbind) that may contain "/var/rubrik" in the text. I recommend using regex to check. If found, generate an event that does not generate an alarm. Then set the default condition to generate an event that asserts the alarm.

Joe