Flood of Old Email Alerts when reconfiguring Events

[Eric_237]

I posted this in the Insight Manager 7 forum (since that is what I use) -- but thought I could get more help here, since this forum is more active.

When I reconfigure an "event" tied to an email notification task (such as adding a new IP address), it triggers a flood of OLD alerts related to that email task.

Also, when I changed the smtp configuration in our Insight Manager to point to a new DNS name (since we decommissioned the email server it had been pointing to) -- this triggered a flood of EVERY alert (thousands of them).

This essentially brought our alert system to a halt for over 30 minutes.

How can changes be made to email notification tasks and their associated "events" so that this does NOT occur?

[Brian Shields]

Hi Eric

I've experienced the same problems that you describe. I have installed the latest version of SIM 4.2 including the new Service Pack that is "suppose" to fix this known issue, however I still experience a flood of emails.

The only way that I have see that stops this flooding is to view "All Events" and delete all events - you can't delete discovered events however...

This is more a band-aid fix until I un-install SIM and do a fresh install... otherwise I will be forced to revert back to an older version...

hope this helps.

Regards

Brian

[lahteenj]

I have also the same problem.
I hope that there will be a fix soon to this.

[Eric_237]

Brian:

Do you back up the Insight Manager SQL database? I just realized we are not backing up the database -- and I wonder if backing it up will truncate the transaction logs, so maybe all the old alerts won't fire when changes are made to "events" related to email notification tasks?

[Gordon Leonard]

Eric,

Are you using IM7 or SIM?

In IM7 if you create an task based on device vs. event you will see this issue as you noted.

If your using SIM 4.2 you need to apply patch number 2.

[Eric_237]

I'm using Insight Manager 7.

We have "events" defined (like critical events), associated with IP subnets.

That "event" is then tied to an email notification task. So when the critical event occurs on a server in that subnet, an email of the event is then sent to a particular email address.

Is there anyway to avoid the "flood" of old alerts, when making a change to an "event"?

Or is this something that can't be avoided, no matter what, in Insight Manager 7?

[Gordon Leonard]

Well if you delete all the events before making changes to the tast you'll avoid the mail flood. However a better solution is to move on to SIM 4.2. It provides some "cool" tools to fix the on going agent and SNMP problems (not being configured). This alone is worth the leap in my book.