How to define alarm severity at Node. Want to change severity for alarm S1 Down from minor to Major.
1 Like
Hi, @salebgd, from node side severity are hardcoded and can not be changed. I suppose it can be done on OSS side.
1 Like
do you know where in enm is that change? and can default user change it or onlz admin?
thx
1 Like
Hi Saleb,ENM collect node alarms through two methods.First and key method is via SNMP protocol.And few nodes also connected via CORBA interface.(extremely rare MRS is one of the few nodes).SNMP Protocol carries information related to two major stadards.ITU-T and 3GPP. your NMC can decode one set of info or both set of info to identify the key components of the alarm which the trap is represented.One trap is one alarm or alert.It has a Unique key to identify the alarm object,and then the alarm severity and whether it is going to get auto cleared or not with Sequence number.What auto clear means is node will send a second trap once the alarming condition ease off .monitoring person dont have to cleare or delete the alarm manually.To decode the SNMP trap you need to have a MIB repository according to the vendor.I have given a web link for ericsson one please refer.https://mibs.observium.org/mib/ERICSSON-ALARM-MIB .If you correctly decoded the trap it represents a particular state of that alarm object which is Unique.For an Example it says Node 01 Rack 01 shelf 01 board 02 port 01 has a critical alarm.Thats all.So SNMP has predefined severity levels and those will depend on the MIB which means Vendor.But NMC or OMCR or OMCS which youj are using to display alarms simply saying the dashboard can interpret or use those values how ever they wont.they can covert critical ,major ,minor node definition to High medium low representation.OMC can ignore warnings and minor alarms thats according to the support team preference.To make it more clear I will give you examples of the nodes.Your snmp agent or trap generator is the node Enodeb,MSC,MGW etc.,Then your SNMP trap reciver and trap OID decorder is your SNMP Manager .This is the ENM or SC4SNMP add on for splunk.and your OMC is Netcool or Splunk dashbord.Now I think it will be claer for you how SNMP and alarming works.Thank you.
2 Likes
Hi, @salebgd, I have no expirience in that, but here is built-in docs about possibility:
https://enm-address/#help/app/fmx/topic/overview
It is possible to create rule that will be processing such alarm and update severity in original alarm or create new alarm
Description of modules:
https://enm-address/#help/app/fmx/topic/ui/ui_enm_event_trigger_block
https://enm-address/#help/app/fmx/topic/ui/ui_fmxre_update_trigger_block
https://enm-address/#help/app/fmx/topic/ui/ui_fmxre_end_rule_block
1 Like