DFM Strange Behaviour

[MathieuJM_2]

Hi,

We have LMS 2.6 installed with DFM 2.0.8.

We receive mail from DFM. I have check the alert and clear them, so that DFM Alerts and Activities view is empty. But i'm still receiving mail from DFM.

How can i be sure that i have clear the alert ? and why i don't see them in the DFM interface ?

Regards,

[Joe Clarke]

Please post a sample email. Are you saying that there is NOTHING in the Alerts and Activities display?

[MathieuJM_2]

Here are some of the received email from DFM.

I have only deleted some confidantial informations.

EVENT ID = 00008RP

ALERT ID = 00003W9

TIME = Mon 26-Jan-2009 04:07:53 CET

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = 10.X.X.X

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = HighUtilization::Component=PORT-10.X.X.X/10625 [Gi2/0/25];OutputPacketRate=58277.137 PPS;Type=ETHERNETCSMACD;CurrentUtilization=70.789734 %;InputPacketRate=8323.667 PPS;TrafficRate=8.8487168E7 BYPS;UtilizationThreshold=40;DuplexMode=FULLDUPLEX;MaxSpeed=1000000000;

CUSTOMER IDENTIFICATION = Alerte

CUSTOMER REVISION = 1.0

I send you a screenshot of the DFM.

[Joe Clarke]

This looks absolutely correct. The event became active at 04:07:53 (in the morning), and cleared 04:19:53 the same morning. The screenshot of AAD was taken at 12:57:02. By this time, the alert had moved out of AAD into Fault History.

[MathieuJM_2]

Just to understand the mechansism of DFM, how the events are automatically cleared about 12 min after bacame active ?

[Joe Clarke]

In this case, the utilization dropped below the 40% threshold.

[andrecsthompson]

Is it normal for the Utilization to be set to only 40% ?

[Joe Clarke]

Yes, this is the default value.