3.7 EVENT CORRELATION REQUIREMENTS
With the advent of Message Correleation in OVO 7.x, message correlation is much simpler. Correlate messages within OVO whenever possible. Event correlation (NNM) using Event Correlation Services (ECS) is a whole project in and of itself and is not typically tackled during the first phase of an enterprise management project. Either way, when correlating events or messages, investigate the events and messages that have occurred over time within a specific network area and determine which of those could be correlated into a single event (message).ECS does not prevent the events (traps to NNM) from coming to the network and systems management station, but takes the incoming events and, based on states or circuits, determines the possible problem and presents one event to an operator or none at all. At any point within a state or circuit an action could be taken to determine if there is still a problem, whether there was one in the first place, or take measures to retrieve more data or wait for more incoming traps before presenting anything to an operator. A myriad of possibilities exists for correlating events. Unless there is knowledgeable staff on hand to take on this task, event correlation with ECS should wait for a future project. |
لطفا منتظر باشید ...
