Logging Correlator Rule - Cisco XR 1200 series Command Reference Manual

logging correlator rule

logging correlator rule
To define the rules for correlating messages, use the logging correlator rule command in global configuration
mode. To delete the correlation rule, use the no form of this command.
logging correlator rule correlation-rule type {stateful| nonstateful}
no logging correlator rule correlation-rule
Syntax Description
correlation-rule
type
stateful
nonstateful
Command Default
No rules are defined.
Command Modes
Global configuration
Command History
Release
Release 3.6.0
Usage Guidelines
The logging correlator rule command defines the correlation rules used by the correlator to store messages
in the logging correlator buffer. A rule must, at a minimum, consist of three elements: a root-cause message,
one or more non-root-cause messages, and a timeout.
When the root-cause message, or a non-root-cause message is received, the timer is started. Any non-root-cause
messages are temporarily held, while the root-cause is sent to syslog. If, after the timer has expired, the
root-cause and at least one non-root-cause message was received, a correlation is created and stored in the
correlation buffer.
A rule can be of type stateful or nonstateful. Stateful rules allow non-root-cause messages to be sent from the
correlation buffer if the bi-state root-cause alarm clears at a later time. Nonstateful rules result in correlations
that are fixed and immutable after the correlation occurs.
Below are the rule parameters that are available while in stateful correlation rule configuration mode:
RP/0/0/CPU0:router(config-corr-rule-st)# ?
context-correlation
nonrootcause
reissue-nonbistate
Cisco IOS XR System Monitoring Command Reference for the Cisco XR 12000 Series Router, Release 4.1
22
Name of the correlation rule to be applied.
Specifies the type of rule.
Enters stateful correlation rule configuration mode.
Enters nonstateful correlation rule configuration mode.
Modification
This command was introduced.
Specify enable correlation on context
nonrootcause alarm
Specify reissue of non-bistate alarms on parent clear
Alarm Management and Logging Correlation Commands
OL-24735-01