irregular nt event log test issue

rbartels · Post by **rbartels** » Thu Mar 23, 2006 10:00 am

I'm monitoring the nt event log for cluster services
I have tests for failures and look for 1201 when resources are being brought online.

Everynight one of the exchange nodes restarts the imap/pop cluster resource in order to roll the logs. I'm trying to set a schedule blockout which disables the test from 1am-2am. At 2am when the test re-enables, hostmonitor detects a 1201 cluster event that happened during the blockout time and pages anyway.

Is there a way to make it ignore any log events that transpire during the blockout times?

Does "reset occurences after disabled test" have something to do with this?

Thanks

Bob

Yoorix · Post by **Yoorix** » Thu Mar 23, 2006 11:04 am

I think you should try to set "Time restriction" in Action Properties window.
http://www.ks-soft.net/hostmon.eng/mfra ... #TimeRestr

Regards,
Yoorix

KS-Soft · Post by **KS-Soft** » Thu Mar 23, 2006 11:48 am

At 2am when the test re-enables, hostmonitor detects a 1201 cluster event that happened during the blockout time and pages anyway

That's right

Is there a way to make it ignore any log events that transpire during the blockout times?

The simplest solution - use schedule for the action, not for the test. This way test will detect the event, change status but it will not start alert.
More complicated solution - use "Start HMScript" with ResetEventLogRefPoint command. Problem is - this action should be started before your NT Event Log test, so you will have to create additional test.

Regards
Alex