Power outage in branch office = suppressed alarms in Spectrum = blind NOC

[Laurent Heyraud]

Hello, 
 
 Spectrum is monitoring our branch office network devices. The BIG BIG BIG issue is, when there's a power outage within a branch office all the devices are tagged as SUPPRESSED in Spectrum instead of DOWN; Is there any way to disable that behavior ? I do not want to enable suppressed alarms as this is creating lots of noise within the alarm tab. 
 I've skimmed the forum but could not find any hint
 Thanks for your time, kinb regards
 Laurent

[Silvio Okamoto]

Hi Laurent,

Change the "Unresolved Fault Alarm Disposition" from "Fault Isolation Model" to "Device In Fault Domain" in the Fault Isolation subview of the VNM model.
Then choose a device where you want the Critical alarm by raising the criticality attribute value.

https://docops.ca.com/ca-spectrum/10-3-2/en/managing-network/modeling-and-managing-your-it-infrastructure/fault-management/fault-isolation-settings

• Unresolved Fault Alarm Disposition
  If information about the connectivity of your network model is incomplete, CA Spectrum may be unable to find the root cause of a network outage. In this case, the status of all devices affected by the outage is set to gray, and a red unresolved fault alarm is generated. This alarm indicates that CA Spectrum has lost contact with a group of devices, but was unable to pinpoint the cause.
  All of the devices to which CA Spectrum has lost contact are listed in the impact scope of the alarm. The model name and other details of the lost devices also appear in the event that generated the alarm.
  The Unresolved Fault Alarm Disposition field lets you control how the unresolved fault alarm is generated. When set to Fault Isolation Model, the alarm will be generated on the Fault Isolation model. When set to Device In Fault Domain, the alarm will be generated on one of the devices with which CA Spectrum has lost contact. When determining which device to generate the alarm on, CA Spectrum looks for the device with the highest criticality. If the highest criticality is shared by two or more devices, CA Spectrum generates the alarm on the first of these devices that it finds. If all devices have the same criticality, then CA Spectrum chooses the device with the lowest model handle.

  Note: The default behavior is to place Unresolved Fault Alarms on the Fault Isolation model. Most users prefer to have unresolved fault alarms placed on a device in the fault domain, where the problem is more visible. This default behavior can be changed from "Unresolved Fault Alarm Disposition.

------------------------------
Technical Support Engineer IV
Broadcom Inc
------------------------------

[Laurent Heyraud]

Ciao Silvio, grazie mille, perfect
Kind regards
Laurent 

[Joern Henrichs]

Hi Laurent,

If Alarms are suppressed, there is always an root cause alarm showing. This might be on the fault isolation model, if the Branch office network is not connected to the rest of the Network. In this case you can use the option above, wich will assert the alarm to the most critical device in that branch office. Or you could model a connection between your network and the branch office, e.g. using a Fanout, then you will have the alarm on the Connection, which should make more sense.

Cheers,
Joern.

------------------------------
Senior System Engineer
Computacenter
------------------------------