How Entuity handles a flapping port, one that goes up, down, up, down:
- Entuity receives a trap which it handles as a Port Link Up event. Entuity applies the Unify Port Up Event rule. As a Port Link Up event it meets the condition and so Entuity performs the action, setting the event type to Port Up. All other details associated with the event are retained, including the event name. If you wanted to set the event name to match the event type then you would create an additional action to set the event name attribute: Set Attribute name = "Port Up" Entuity applies the Detect Port Flapping rule which identifies the port as not flapping because the number of changes in the port state is not 4 or more within the previous 2 minutes. Entuity saves to the database the Port Up event which displays in the viewer with the event name Port Link Up.
- Entuity polls the port, detects it is up and raises a Port Operationally Down Cleared event. Entuity applies the Unify Port Up Event rule. As a Port Operationally Down Cleared event it meets the condition and so Entuity performs the action, setting the event type to Port Up. All other details associated with the event are retained, including the event name. Entuity applies the Detect Port Flapping rule which identifies the port as not flapping because the port is already set to down. Entuity saves to the database the Port Up event which displays in the viewer as a Port Operationally Down Cleared event.
- Next the port goes down, for simplicity we will restrict the example to trap events. Entuity receives a trap which it handles as a Port Link Down event. Entuity applies the Unify Port Down Event rule. As a Port Link Down event it meets the condition and so Entuity performs the action, setting the event type to Port Down. All other details associated with the event are retained, including the event name. Entuity raises the Port Status Problem incident. Entuity applies the Detect Port Flapping rule which identifies the port as not flapping because the number of changes in the port state is not 4 or more within the previous 2 minutes. Entuity saves to the database the Port Down event which displays in the viewer as a Port Link Down event.
- The port goes up. Entuity receives a trap which it handles as a Port Link Up event and after applying the Unify Port Up Event rule raises a Port Up event. Entuity closes the Port Status Problem incident. Entuity applies the Detect Port Flapping rule, identifies the port as not flapping and so saves to the database the underlying Port Up event but displays it in the viewer as a Port Link Up event. Entuity also closes the Port Status Problem incident.
- Next the port goes down. Entuity receives a trap which it handles as a Port Link Down event. Entuity applies the Unify Port Down Event rule. As a Port Link Down event it meets the condition and so Entuity performs the action, setting the event type to Port Down. All other details associated with the event are retained, including the event name. Entuity raises the Port Status Problem incident. Entuity applies the Detect Port Flapping rule which identifies the port as flapping because the number of changes in the port state is 4 within the previous 2 minutes. Entuity saves to the database the Port Down event and raises the Port Flapping event. The Port Link Down event is not displayed until the Port Flapping event expires, or the port again changes state. You can view the events that contribute to the derived Port Flapping event by highlighting the event and from the context menu clicking Show Details.
Comments
0 comments
Please sign in to leave a comment.