Don't want to be alerted when "System is unreachable"

[Wayne Lance]

I've set up SIM 4.1 to send email alert for any event on a system where hardware status is Critical, Major, or Minor. This has pretty much gotten it to where I want it to be, except for the fact that I get alerts whenever a server is unreachable (usually due to WAN issues). We have other means to monitor system up/down status, so I don't want SIM to bother me with it. I've puzzled most of the day in Automatic Event Handling and Customize Lists trying to solve this problem, but cannot figure out how to do this. Anyone have any advice how I can make it alert only on true hardware problems? Thanks

[Rob Buxton]

Possible ways to alleviate the problem are to change some of the Ping Retry parameters in various parts of HPSIM to make it a bit more tolerant of Network issues.

I see what you'd really like would be to be able to set up an Event Notification with Severity equals critical and event criteria doe not equal unreachable. Alas this is not possible.

Another approach might be to change the Priority of the Unreachable Event, I'm not sure how you'd do that as it's not an SNMP Trap as such.

[Jim C_2]

You can drop the severity level to something like Informational (you're not alerting on it). You have to modify the appropriate MIB.

[Darrin Rawls · Accepted solution]

You can actually turn off the status change events in HPSIM. Log in with administrator rights, click on Options/Events/Status Change Event Settings.

See if that doesn't get you what you want...

[Wayne Lance]

Thanks guys for your suggestions. I've bumped up the ping retry, and that will cut out some of the garbage, as most WAN outages are fairly brief. But I've gotten the best results with Darrin's suggestion. With "Enable creation of system status change events" unchecked, there is no critical "System is unreachable" event created. However the hardware status still goes to critical, and there still are a couple of informational events generated when the system comes back online, which all added up to my still getting alerts the way I had the event handling task set up. So I changed my rule to alert when HW status is Critical/Major/Minor, and email only Critical/Major/Minor events rather than any severity event as I had it before. So now I get no email when a system is unreachable, just as I want.

I really wanted to pursue Rob's & Jim's idea of lowering the severity of the "System is unreachable" event, but must not be looking in the right place. I went to Options/Events/SNMP Trap Settings, and could not find this event. But that would stand to reason, since this isn't a trap-generated event, but comes from SIM's own polling. I still would be very intersted to know where I can lower the severity if it can be done.

Thanks.

[Jim C_2]

Under Options, Events, SNMP Trap Settings, you can change the severity levels.