EMSメッセージがドロップされる原因は何ですか
環境
ONTAP 9
回答
- イベントはEMS抑制アルゴリズムによって抑制されました。
- イベント処理システムは、複数のアルゴリズムを実装してイベントを調整します。
- 抑制されたイベントの情報には event status show コマンドを使用してください
ontap91::> set diag -confirmation off; event status show -message-name security.invalid.login -ins
Node: ontap91-01Message Name: security.invalid.loginNumber of Indications: 13Number of Drops: 11 Last Indication Time: 6/2/2020 10:27:54Last Suppressed Indication Time: 6/2/2020 10:27:54Last Processed Indication Time: 6/2/2020 10:25:41Stat Starting Time: 6/1/2020 12:42:5960-minute Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 024-hour Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 07-day Histogram: 0, 0, 6, 7, 0, 0, 0Is Chatter: falseChange since Last Chatter Calculation?: falseNumber of Times Autosuppressed: 0Number of Times Rate Limited: 0Number of Times Timer Suppressed: 11 Number of Times Duplicate Suppressed: 0Number of Times Suppressed Since Last Time Logged: 5Accumulated Bytes: 491Severity: SVC_FAULTProbability to Suppress: 0%Number of Times Duplicate Suppressed (-30 secs): 0Number of Times Duplicate Suppressed (30-60 secs): 0Number of Times Duplicate Suppressed (60-90 secs): 0Number of Times Duplicate Suppressed (90-120 secs): 0Number of Times Duplicate Suppressed (120- secs): 0追加情報
- Use event config show を使用して、イベント抑制アルゴリズムが有効("on")か無効("off")かを判別します。
- 抑制アルゴリズムの詳細については、event show-suppressiondiagコマンドを参照してください。- ontap914::*> event show-suppression
 Node: ontap914-01
 Time since rotate (t0): 489618s Autosuppression enabled: true
 Time to next rotate (t1): 115182s Past startup time ( 10m): true
 Time scale (ts=t1/t0):
 0.2352487040917613 Past min log size ( 2048): true- Target max bytes (T): 36700160 Per event chatter threshold:
 1520769
 Accumulated bytes (A): 4119384
 Bytes remaining (B=T-A): 32581072 Number of events not subject
 Predicted bytes (P=A*ts): 969010 to autosuppression: 3012
 Of events subject to autosuppression
 AutoSuppression probability number suppressed: 720
 (a=max(0,(P-B)/P)): 0% number rate limited: 0
 number not suppressed: 8826
 Total indications: 12639 duplicates suppressed: 51
 duplicates suppressed
 in 30 seconds: 10
 duplicates suppressed
 in 60 seconds: 5
 duplicates suppressed
 in 90 seconds: 4
 duplicates suppressed
 in 120 seconds: 8
 duplicates suppressed
 after 120 seconds: 0
 timer suppressed: 3
 Node: ontap914-02
 Time since rotate (t0): 489627s Autosuppression enabled: true
 Time to next rotate (t1): 115173s Past startup time ( 10m): true
 Time scale (ts=t1/t0):
 0.2352259985662555 Past min log size ( 2048): true- Target max bytes (T): 36700160 Per event chatter threshold: 890109
 Accumulated bytes (A): 2613303
 Bytes remaining (B=T-A): 34087151 Number of events not subject
 Predicted bytes (P=A*ts): 614647 to autosuppression: 2268
 Of events subject to autosuppression
 AutoSuppression probability number suppressed: 0
 (a=max(0,(P-B)/P)): 0% number rate limited: 0
 number not suppressed: 5144
 Total indications: 7488 duplicates suppressed: 61
 duplicates suppressed
 in 30 seconds: 2
 duplicates suppressed
 in 60 seconds: 3
 duplicates suppressed
 in 90 seconds: 5
 duplicates suppressed
 in 120 seconds: 2
 duplicates suppressed
 after 120 seconds: 0
 timer suppressed: 3
 2 entries were displayed.