Updated on 2022-02-21 GMT+08:00

Configuring Aggregation Rules

Prerequisites

You have the following operation permissions: Set Aggregation Rules.

Context

  • A rule is valid only to the alarms or events reported after the rule is enabled.
  • In an aggregation rule, when the number of times that the same alarm or event (with the same alarm or event ID) is reported by the same NE in a specified period meets the trigger condition, an aggregation is triggered and a new aggregated alarm is generated. The alarms that meet all the conditions of the alarm aggregation rule are the original alarms. When an aggregated alarm is generated based on the rule, the correlative alarms are marked as original alarms. To view all original alarms, you can select Original alarms for Associated alarm ID when setting the filter criteria for current alarms.
  • If an aggregated alarm generated based on the alarm aggregation rule is cleared, its correlative original alarms are cleared. If the original alarms are cleared, their correlative aggregated alarms are also cleared. To handle an aggregated alarm, handle the faults corresponding to the original alarms one by one.
  • A maximum of 1000 custom aggregation rules can be created.
  • By default, the rules are sorted by the enabled and disabled states, and the rules in the same state are sorted by update time in descending order.
  • If the interval between the time when an alarm is generated and the time when the alarm arrives at the NMS is longer than 5 minutes, the alarm does not match the aggregation rule even if the alarm meets the conditions.
  • On the page for creating an event aggregation rule, only the Generate an aggregated alarm and Generate an aggregated alarm and mask all original events options are provided in the Aggregation Action area. The information about the aggregated alarm generated based on the event aggregation rule is the same as that of an original event. The original events of the aggregated alarm cannot be viewed.

Procedure

  1. Choose Device Management > Alarms Management > Alarm Settings from the main menu.
  2. In the navigation pane, choose Aggregation Rules.
  3. Create an aggregation rule.

    1. On the Aggregation Rules page, click Create, and choose the desired rule type from the drop-down menu.
    2. In the Basic Information area, set the rule name, description, and whether to enable the rule.
    3. In the Conditions area, set the name, sources, and advanced conditions of the target alarm or event. If alarms or events reported by the selected alarm or event source meet the configured advanced conditions, aggregation analysis is performed.
    4. In the Aggregation Parameters and Aggregation Action areas, set aggregation parameters and aggregation action. For details about the parameters, see Table 1.
    5. Click OK.

Related Tasks

  • Deleting a rule: You can select a redundant rule from the rule list and click Delete to reduce the rule maintenance workload.
  • Enabling/disabling a rule: You can select a rule that is not used temporarily from the rule list and click Disable. To use a disabled rule, select the rule and click Enable.
  • Migrating rules: You can click Export on the rule page of the source system to export rules. Then, click Import in the target system to import the rule file exported from the source system to the target system.
  • Backing up, collecting statistics on, and reviewing rules, and modifying rules in batches: You can click Export on the rule page to export rules and back up, review, and collect statistics on the rules. If you need to modify rules in batches, you can modify the rules in batches in the exported rule file. Then, click Import on the rule page to import the modified rule file.

Parameter Description

The following uses the parameters for creating an alarm rule as an example, and they are similar to those for creating an event rule.

Table 1 Parameters for creating an alarm aggregation rule

Item

Parameter

Description

Aggregation Parameters

Aggregation scope

Intra-NE: Aggregates alarms that are from the same alarm source and meet the conditions.

Key parameters

Sets a location information matching condition. When the location information of reported alarms meet the condition, the system determines whether the alarms are aggregated.

  • Specified property: The condition is met when the values of properties in the location information of original alarms matches the settings in the condition.
  • Full match: The condition is met when the location information of original alarms is the same.
NOTE:

Only the location information conditions can be set for Key parameters.

Trigger condition

In a specified period, when the number of alarms that meet aggregation conditions is greater than or equal to Generated alarms, an aggregation is triggered.

Termination condition

In a specified period, when the number of alarms that meet aggregation conditions is less than or equal to Generated alarms, the aggregation is terminated.

Aggregation Action

Aggregation action

  • Generate an aggregated alarm: A new aggregated alarm is generated, and the original alarms are marked as the original alarms and reported to the upper-layer NMS.
  • Generate an aggregated alarm and mark all original alarms as correlative alarms: A new aggregated alarm is generated, and all original alarms are marked as correlative alarms.
  • Generate an aggregated alarm and mask all original alarms for NMS: A new aggregated alarm is generated, and the original alarms are marked as the original alarms. In this case, the original alarms are not reported to the upper-layer NMS.
  • Generate an aggregated alarm after aggregation and always display all original alarms on Masked Alarms: All original alarms are displayed on the Masked Alarms page regardless of whether aggregation is triggered, and an aggregated alarm is generated after aggregation is triggered.
  • Generate an aggregated alarm and discard all original alarms: A new aggregated alarm is generated, and all original alarms are discarded.
  • Generate an aggregated alarm and discard all original alarms after aggregation: If a new aggregated alarm is generated, the original alarms reported after the aggregation are discarded.
  • Report original alarms without aggregated alarms: No aggregated alarms or original alarms are generated, and original alarms are not masked as original alarms. If this option is selected, you can customize the severity of original alarms in the Original alarm settings area.

Aggregated alarm settings

Alarm sources:

  • NE: Reports an aggregated alarm whose alarm source is NE. The location information of the aggregated alarm contains rule ID and original alarm information. Other information of the aggregated alarm is the same as that of an original alarm.
  • OSS: An aggregated alarm, ALM-832 Parallel Alarm Exceeds the Limit, whose alarm source is OSS is reported.

Reserved fields of Location Info: After this parameter is set, the specified fields are displayed in the Other Information column of the aggregated alarm list.

You can also customize some fields of an aggregated alarm, for example, customizing the severity.

Original alarm settings

This option is displayed when Report original alarms without aggregated alarms is selected for Aggregation action. You can set the severity of original alarms.