The event log holds the latest up to 1.5 million events.
-
From the menu (click
), select Alarms and Events and then select the Events tab.The following details are displayed:
Field
Description
Date
The date of the event.
Hover over the date to see how long ago the event happened. For example, "33 minutes ago".
Object Name
The object involved in the event.
Message
A description of the event.
Cluster
The cluster in which the event occurred.
Event Type
The type of event that occurred. See Event Types.
Object Type
The type of object involved in the event.
Origin
The initiator of the event. Possible values:
Cluster
Management
Security
User
Severity
The severity of alarm triggered by the event. This is inherited from the event definition, and you can modify it. Possible values:
Info. No alarm was raised.
Minor. An alarm of severity minor was raised.
Major. An alarm of severity major was raised.
Critical. An alarm of severity critical was raised.
-
To filter the list, click the Filter button above the list and select the time period, event type, object type, origin, severity and message, by which you want to filter the list.
When filtering by message, enter any message content you want to search for and press the enter key to initiate the search.
Alarms are classified with three levels of severity: minor, major, and critical. The severity of an alarm is inherited from the definition of the event that triggered the alarm.
Alarms are automatically removed when the events that triggered them are resolved. In many cases, automatic recovery features handle and resolve events. Occasionally, user intervention may be required to resolve the issue.
How do I know when there are active alarms?
When one or more alarms are present, an indicator shows the number of alarms present:
How can I see what is causing alarms?
To see a summary of alarms, classified by severity, click the alarm indicator:
To read the alarm messages in more detail, open the Alarms page:
To open the Alarms page with no filtering, click See All.
To open the Alarms page filtered for a specific severity, click the "more" link for the severity.
To open the Alarms page from the menu at any time, click
to open the menu, select Alarms and Events and then select the Alarms tab.
Can I Acknowledge Alarms?
If you've seen the alarm messages and you want to hide them from view, you can hide all the current alarms from view by clicking the Acknowledge all button (
). The alarms remain visible to the root and support users.
To make sure that notifications are sent when alarms are triggered, do the procedure below to configure:
The outgoing email server for email notifications. You will need to supply an SMTP server for this.
Default email recipients and webhooks for sending alarm notifications to an external applications. These defaults apply to all alarms by default.
Optional default email settings.
If you want to disable actions for a specific type of event or to set up an alternate email recipient or webhook for any particular type of event, you can do that in the specific event definition (see Modifying Event Definitions). The outgoing email server is global, required for default email recipients as well as for any alternate email recipients that you define per event definition.
From the menu (click
) , select Settings and then select the Defaults tab.-
In the SMTP Setup area, enter the details of an SMTP server for VAST Cluster to send email notifications from.
SMTP Host
The host name of the SMTP server.
For example: mail.company.com.
SMTP Port
The port used by the SMTP server to send outgoing emails. The most commonly used port for SMTP is port 25, although some IPs deny its use in order to block spam. SMTP servers often support alternate ports, including port 587.
SMTP User
User for SMTP host authentication.
SMTP Password
The password for the SMTP user.
Use TLS
Enable this setting to send email over a TLS connection.
-
Under Email Setup, complete global and default email settings:
Email Sender
Global for all alarm notification emails. The sender email that appears in the emails. The default value is a merely suggestive.
Example: do_not_reply@company.com
Email Subject
Optional and global for all alarm notification emails. Any string you enter here is used globally as the subject for all notification emails.
Leave it blank to send alarm info in the subject.
Example: VAST Alarm
Email Recipients
Default email recipients. These recipients receive notifications of all alarms except those triggered by events that have a different list of email recipients specified in the event definition or for which actions are disabled.
Enter as a comma separated list of email addresses (no spaces).
Example: storage_admin@company.com,bsmith@company.com,abrown@company.com
-
Under Webhook Setup, optionally specify default webhook details. Any webhook you define here will be triggered by all alarms except those triggered by events that have a different webhook definition or for which actions are disabled:
Webhook URL
The URL of the API endpoint of an external application, including parameters.
Webhook data
The payload, if required, for the endpoint. You can use the
$eventvariable to include the event message.Webhook Method
Select the HTTP method you want to invoke with the trigger:
POST
GET
PUT
PATCH
DELETE
-
Click Save.
The settings are now saved.
-
From the menu (click
) select Alarms and Events and then select the Event Definitions tab. All event definitions are listed. You can filter the list by object type and by event type. (Click Filters (above the grid) to display the filter controls.) The following information is displayed for each event definition:
Object Type
The type of object being monitored for the event. This could be the cluster, a hardware component such as a NIC, or a logical entity such as a snapshot.
Property
A monitored property of the object. For example: state, number of PCI errors, percentage memory usage.
Event Type
What type of change in the property triggers an alarm. See Event Types
Severity
The severity of the triggered alarm. Can be critical, major, minor or N/A. If N/A , the event doesn't have an alarm defined.
-
Hover over the row of the event definition that you want to modify, under the far right column, until the Edit button (
) appears, and then click the button.The Update Event Definition dialog appears.
-
To make changes to the alarm definition, modify the fields in the Alarms area :
-
For Object Modified type events:
Trigger On
The value or the monitored property at which to trigger an alarm. You can deselect the default values and restore them by clicking the Restore Defaults button.
Trigger Off
The value or the monitored property at which to trigger off an alarm. You can deselect the default values and restore them by clicking the Restore Defaults button.
Severity
Select a severity from the dropdown.
For example: Critical
-
For Threshold type events:
Operator
Select one of the options from the drop-down:
greater than. The alarm is triggered when the monitored property increases to higher than the specified threshold value.
greater equal. The alarm is triggered when the monitored property increases to the specified threshold value or higher.
lower than. The alarm is triggered when the monitored property falls below the specified threshold value.
lower equal. The alarm is triggered when the monitored property falls to the specified threshold value or below it.
Threshold
The threshold value of the relevant property.
For example: 70
Severity
Select a severity from the dropdown.
-
For Rate type events:
Operator
Select one of the options from the drop-down:
greater than. The alarm is triggered when the monitored property increases to higher than the specified threshold value.
greater equal. The alarm is triggered when the monitored property increases to the specified threshold value or higher.
lower than. The alarm is triggered when the monitored property falls below the specified threshold value.
lower equal. The alarm is triggered when the monitored property falls to the specified threshold value or below it.
Threshold
Timeframe
The time frame over which to monitor the property. Enter a number followed by time prefix without spaces:
s - seconds
m - minutes
h - hours
D - days
M - months
For example: 1h
Severity
Select a severity from the dropdown.
For example: Critical
-
-
In the Actions area, optionally set up non-default actions to trigger on alarms.
By default, alarm notifications are sent to any email recipients and webhooks defined as defaults for all alarms (see Setting Up Alarm Notifications).
-
To send alarms specifically for this event to an external application, complete the webhook parameters:
Webhook URL
The URL of the API endpoint of an external application, including parameters.
Webhook data
The payload, if required, for the endpoint. You can use the
$eventvariable to include the event message.Webhook Method
Select the HTTP method you want to invoke with the trigger:
POST
GET
PUT
PATCH
DELETE
-
To send email notifications to non-default recipients, enter the recipient email addresses as a comma separated list (no spaces) in the Email Recipients field.
Note
An SMTP server and sender email must be defined in the Defaults tab of the Settings page. See Setting Up Alarm Notifications.
To disable actions for this alarm, enable the Disable Actions button.
-
-
Click Update to simply save the changes or click Update & Test to save your changes and send a test notification.
You can restore the default settings at any time by clicking Restore Defaults.
When you're viewing the events log on the Events page or the current alarms in the Alarms page, you can easily download all of the events in the log or all of the current alarms.
You can also easily copy a single event or alarm to your clipboard.
Downloading Event Log or Current Alarms
To download a complete log or a complete list of the current alarms, click the download button at the top right of the list: 
.
Copying an Event or Alarm
To copy an event or alarm to your clipboard, click the event or alarm on the page. A message appears telling you that the event or alarm was copied to your clipboard.
Comments
0 comments
Please sign in to leave a comment.