Alarm Detail Monitor
Use the Alarm Detail monitor to sort alarms, view an alarm in depth, and to assign a disposition to an alarm.
By clicking the Details icon, you can access the Alarm Detail monitor from any of the four alarm monitors available on the main page in Fault mode (Severity, Category, Current, or State). It is also available from the Current Active Monitors available from the Summary tab in Monitor mode.
This topic describes:
Finding Specific Alarms
Use the Alarm Detail monitor to locate a specific alarm, research the events causing the alarm, and to assign a disposition to the alarm. When an alarm is highlighted in the sorting sequence, the events contributing to the alarm are listed in Event Details and the variable settings are shown in Event Attribute Detail.
To locate an alarm and to assign a disposition to the alarm:
- Sort the list using the Display list. Sorting choices vary depending on how you arrived here. View Sorting Alarms for details on sorting options.
- Review the sorted list. Each entry shows a minimum of one to a maximum of nine fields. These fields are described in Table 1.
- Examine the events and event attributes that contributed to sending the alarm. Events and event attributes are discussed in Reading Events and Investigating Event Attributes.
Table 1: Alarm Detail Fields
Shown in Detailed View by Default
A system and sequentially-generated identification number.
The IP address of the device or network element that generated the alarm. The SNMP agent is located at the source IP. In most cases, the source IP is the IP address of the device or SDG. You can correlate the alarm with the corresponding device for corrective measures..
The severity of the alarm. Severity levels are:
Detailed information about the alarm. This description provides more information about the probable cause or solution for the condition that caused the alarm The description also provides the date and time when the failure was detected. Note the date and time of an alarm so that you can correlate it with error messages or with the messages system log file.
The date and time that the information for the alarm was last modified.
Count of the alarm generated. Alarm notification dampening is performed based on the alarm counter.
System log message generated for the alarm. Each system log message identifies the Junos OS process that generated the message and briefly describes the operation or error that occurred.
Depending on the monitor you chose to access Alarm Detail, your sorting options change to reflect the summary monitor. The different sort options are listed in Table 2.
Table 2: Sort Options for Alarms
Alarms by Severity Sort
Alarms by State and Current Active Alarms Sort
You can also use Searching Alarms in the Tasks pane to perform searches using multiple arguments. With multiple arguments, you can isolate a single alarm from a long alarm list.
When you select an alarm in Alarm Detail, the Event Detail table updates with information about the events that are associated with the alarm. Table 3 lists the fields in Event Detail.
Table 3: Event Detail Fields
The event name; also known as the SNMP trap name.
A system-generated, hexadecimal code that uniquely identifies the event.
If the event is an SNMP event, it is shown as a system-generated event.
The type of event, either fault or system alert.
The category of the event message. The category corresponds to the alarm categories shown in the Alarms by Category monitor and the Alarm Settings window.
The identification of the entity that is the cause of this event ; it is not necessarily the ID of the event that generated the event.
The identification of the entity that generated this event, for example, the switch IP or controller IP address.
The date and time of the last update to the event.
Investigating Event Attributes
The Event Attribute Detail window reflects the variables set during the event. In SNMP terminology, these attributes are known as variable bindings or varbinds. These attributes can provide key information about triggers. For example, if a fan fails, the attribute field could indicate the location of the fan in the chassis.
Changing the Alarm State
When an alarm is first reported, it is considered an active alarm. To change the alarm state, to assign the alarm to a person, or simply to record notes about the alarm, use the buttons on Alarm Details. These buttons are:
Acknowledge—Use this button to acknowledge or record that the alarm is known and is being addressed.
Clear—Use this button to clear or remove the alarm. The clear state says that the issue sending the alarm has been resolved and no long requires attention.
Annotate—Use this button to record actions taken to resolve the alarm.
Assign—Use this button to assign active or acknowledged alarms to staff.