The Alarm And Event Log Archives - Extreme Networks EPICenter Guide Manual

Tuning and Debugging EPICenter
You can scope an alarm to Device Groups and Port Groups as well as individual devices and ports.
To change the alarm scope for an existing alarm:
1 Under the Alarm Definition tab in the Alarm System feature, select the alarm you want to scope, and
click Modify.
2 Select the Scope tab
3 Uncheck the Scope on all devices and ports checkbox. This enables the Source Type and Select
Group fields.
4 The Source Types you can select are Device, Device Group, Port, and Port Group.
If you select either Device Group or Port Group, the area below (labeled Devices in the example)
will display a list of all the Device Groups or Port Groups defined in EPICenter. When you select
one or more of these, it puts the group(s) as a whole into the Selection list at the right.
If you select Device or Port, then the Select Group field lets you select a Device Group to display the
devices in the group in the field below.
If the Source Type is Devices, individual devices in the selected Device Group can be added to
●
the selection list
If the Source Type is Ports, individual port ifindex values can be added to the selection list.
●
Using Device Groups and Port Groups for Alarm Scopes
Special-purpose Device Groups and Port Groups are very useful for purposes of alarm scoping. Devices
Groups are created in the Inventory Manager; Port Groups are created in the Grouping Manager. Since
EPICenter allows you to put the same devices or ports into multiple different groups, you can create
special purpose groups that simplify the configuration of alarm scopes.
For example, you might create a port group for the critical links on your core devices, another for edge
port links or for wireless interfaces.
A major benefit of using Device and Port Groups for alarm scoping, rather than configuring the scope
with individual devices and ports, is that you can then change the scope of an alarm by simply
changing the membership of the relevant groups. You can add or remove links from a Port Group, or
add or remove devices from a Device Group, and the scope of the alarm will automatically reflect the
changed group membership. You do not need to modify the alarm definition every time you add or
change devices or ports on your network.

The Alarm and Event Log Archives

The EPICenter server stores a maximum of 50,000 events in the event log, and a maximum of 12,000
alarms in the alarm log. Both are stored as tables in the server database. Excess data from the event log
and alarm log are archived to files when the logs reach 115% of their maximum size.
The event log archive is made up of two 30MB rotating archive files and includes all traps and Syslog
messages. The event log is stored in a file called
event_log.old
The alarm log archive is made up of two 6 MB rotating files and includes all alarms associated with
traps and Syslog messages. The alarm log is stored in a file called
called
alarm_log.old
136
.
.
and the archive file is called
event_log.txt
alarm_log.txt
EPICenter Concepts and Solutions Guide
and the archive file is