How do I manage event suppression rules?

To view event suppression rules

To enable/disable event suppression rules

To enable suppression of events from recently added devices

To edit an event suppression rule

To view event suppressions on different servers

To delete an event suppression rule

You can view, edit, and delete event suppression rules from the Event Suppressions page.

For an explanation of how event suppressions work in Entuity, see this article.

To view event suppression rules:

1. From the Main Menu, click Administration and navigate to the Events section of the Entuity Administration page.
2. Click Event Suppressions.
   The Event Suppressions page is displayed, listing the event suppression rules in the table.
   
   

The table on the Event Suppressions page provides the following information:

• Source - the selected object or objects to which the suppressed event applies.
• Origin Device (Entuity v20.0 P02 upwards) - origin device to which the suppressed event applies.
• Parent (Entuity v20.0 P02 upwards) - parent object of the origin device, if any. This might be the same as the origin device.
• Type - type of device to which this event suppression applies, for example, Router Device.
• Suppress For - the attribute value on which the event is suppressed, for example, IP address.
• Sub Components - whether events are suppressed for sub-components of the device, either Yes or No.
• Event Type - the selected event type to which the event suppression rule applies. If you have chosen multiple event types, each event type is listed as a separate rule in this table.
• Starts At - time and date at which the suppression rule starts.
• Ends At - time and date until the suppression rule is applied. If blank, there is no end date and so is always active.
• Recurrence - indicates if a Time & Day schedule is applied to the suppression rule.
• Reason - the description of the rule.
• Last Updated By - the user name of the last person to update the suppression rule.
• Last Updated At - time and date the suppression rule was last updated.

In a multi-server configuration, specify the server for which you want to view event suppressions by selecting the server from the server selection dropdown field. From Entuity v19.0 P02 onwards, you can display the event suppressions for all servers by clicking 'All Servers'.

To enable/disable an event suppression rule:

1. From the Main Menu, click Administration, and navigate to the Events section of the Entuity Administration page.
2. Click Event Administration.
   The Event Administration page is displayed.
3. Click the Rules tab.
   
   
    
4. Navigate to the event suppression rule that you want to enable or disable in the navigation pane on the left.
   
   
    
5. Select the rule you want to enable/disable and click Edit at the bottom of the window.
   The Edit Rule form is displayed.
6. Select or clear the enabled check box, and click OK to save your changes. Otherwise, click Cancel.

You can deactivate event suppression rules by setting an elapsed date, after which suppression rules are expired, but by default are not deleted. There are two ways in which to do this:

• by setting deleteExpiredEventSuppressionsPeriodSeconds in entuity_home\etc\entuity.cfg. Entuity will then delete suppression rules that are expired for the set period or longer.
• from the Scheduled Event Suppression section of the Create Event Suppression form.

To enable suppression of events from recently added devices:

Entuity comes with an event suppression rule that discards events for devices that have been under management for less than 24 hours. This can prevent event floods generated at the start of monitoring. By default, this is not turned on and you must manually enable it:

1. Navigate to Event Administration > Rules tab, as described earlier in this article.
2. In the navigation pane on the left, click Pre Storage > Initial Filtering > Discard Events From Recently Added Devices.
   
   
    
3. Click Edit at the bottom of the window to open the Edit Rule form.
4. Select the enabled check box in the top-right of this form, and click OK to save your changes. Otherwise, click Cancel.
   
   

To edit an event suppression rule:

1. Navigate to the Event Suppressions page as described earlier in this article.
2. Select the rule that you want to edit. 
3. Click Edit in the bottom-right of the page to open the Suppress Events form.
4. Edit the suppression rule and click OK. Any changes to the rule are applied immediately.

From ENA v18.0 P04 onwards, you can select and edit multiple event suppression rules at the same time. Hold ctrl and select the rules you want to edit, and then click Edit. When editing multiple suppressions, if a conflict is found between suppressions, then only the changed values are saved.

To view event suppressions on different servers:

If you are signed into a server that manages other servers, you can use the Explorer button to find those servers and see the event suppressions on those servers. The Explorer button is only visible if your server is managing other servers.

The Event Suppressions page defaults to the event suppressions of the server that you are logged into. In the following example, the user is signed into the g*** server server. This server is managing other servers, so the Explorer button is present. Click Explorer.

 

The Explorer form is displayed, which lists the available servers that your current server manages. In the following example, there are some event suppressions on the y*** server.

 

The Event Suppression page for the y*** server shows the event suppressions on the y*** server. You can edit and remove these suppressions as you normally would, by selecting the suppression and clicking Edit Suppression and Remove Suppression, or by selecting these options from the Overflow Menu or right-click Context Menu.

 

To delete an event suppression rule:

1. Navigate to the Event Suppressions page as described earlier in this article.
2. Select the rule that you want to delete and click Remove Suppression at the top of the page (or from the Overflow Menu or right-click Context Menu).
   
   
    
3. At the deletion confirmation window that is displayed, click Yes to confirm the deletion. Otherwise, click No.