What can cause an EMS message to be dropped?

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 590

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: CORE

Last Updated:

Applies to

ONTAP 9

Answer

The event was suppressed by EMS suppression algrorithms.
The event processing system implements several algorithms to throttle events.
Use event status show command for information on suppressed events

ontap91::> set diag -confirmation off; event status show -message-name security.invalid.login -ins

Node: ontap91-01

Message Name: security.invalid.login

Number of Indications: 13

Number of Drops: 11　

Last Indication Time: 6/2/2020 10:27:54

Last Suppressed Indication Time: 6/2/2020 10:27:54

Last Processed Indication Time: 6/2/2020 10:25:41

Stat Starting Time: 6/1/2020 12:42:59

60-minute Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,

0, 0, 0, 0, 0, 0, 0, 0, 0,

0, 0, 0, 0, 0, 0

24-hour Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,

0, 0, 0, 0, 0, 0, 0, 0, 0,

0, 0, 0, 0, 0, 0

7-day Histogram: 0, 0, 6, 7, 0, 0, 0

Is Chatter: false

Change since Last Chatter Calculation?: false

Number of Times Autosuppressed: 0

Number of Times Rate Limited: 0

Number of Times Timer Suppressed: 11　

Number of Times Duplicate Suppressed: 0

Number of Times Suppressed Since Last Time Logged: 5

Accumulated Bytes: 491

Severity: SVC_FAULT

Probability to Suppress: 0%

Number of Times Duplicate Suppressed (-30 secs): 0

Number of Times Duplicate Suppressed (30-60 secs): 0

Number of Times Duplicate Suppressed (60-90 secs): 0

Number of Times Duplicate Suppressed (90-120 secs): 0

Number of Times Duplicate Suppressed (120- secs): 0

Additional Information

Use event config show to determine if event suppression algorithms are enabled ("on") or disabled ("off").

Note: The suppression parameter can disable both autosuppression and duplicate suppression, but not timer suppression.

See the diag command event show-suppression for suppression algorithm details.
- ontap914::*> event show-suppression Node: ontap914-01 Time since rotate (t0): 489618s Autosuppression enabled: true Time to next rotate (t1): 115182s Past startup time ( 10m): true Time scale (ts=t1/t0): 0.2352487040917613 Past min log size ( 2048): true
  
  Target max bytes (T): 36700160 Per event chatter threshold: 1520769 Accumulated bytes (A): 4119384 Bytes remaining (B=T-A): 32581072 Number of events not subject Predicted bytes (P=A*ts): 969010 to autosuppression: 3012 Of events subject to autosuppression AutoSuppression probability number suppressed: 720 (a=max(0,(P-B)/P)): 0% number rate limited: 0 number not suppressed: 8826 Total indications: 12639 duplicates suppressed: 51 duplicates suppressed in 30 seconds: 10 duplicates suppressed in 60 seconds: 5 duplicates suppressed in 90 seconds: 4 duplicates suppressed in 120 seconds: 8 duplicates suppressed after 120 seconds: 0 timer suppressed: 3 Node: ontap914-02 Time since rotate (t0): 489627s Autosuppression enabled: true Time to next rotate (t1): 115173s Past startup time ( 10m): true Time scale (ts=t1/t0): 0.2352259985662555 Past min log size ( 2048): true
  
  Target max bytes (T): 36700160 Per event chatter threshold: 890109 Accumulated bytes (A): 2613303 Bytes remaining (B=T-A): 34087151 Number of events not subject Predicted bytes (P=A*ts): 614647 to autosuppression: 2268 Of events subject to autosuppression AutoSuppression probability number suppressed: 0 (a=max(0,(P-B)/P)): 0% number rate limited: 0 number not suppressed: 5144 Total indications: 7488 duplicates suppressed: 61 duplicates suppressed in 30 seconds: 2 duplicates suppressed in 60 seconds: 3 duplicates suppressed in 90 seconds: 5 duplicates suppressed in 120 seconds: 2 duplicates suppressed after 120 seconds: 0 timer suppressed: 3 2 entries were displayed.