<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>Use hobbit in operation center with critcal systems view</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hi all</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">We are planing a full change from our "production" Systemmanagment Tool to Hobbit. Now on most Systems are both clients installed and the plan is to use only hobbit.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">In our environment the Operation Center always call when a alerts shows up on their Event Console and acknowledge the alert. With this action the alert is no longer visible for the operators.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">At the moment the Operation Center didnt care about hobbit, but of course lots of other people in our organization use hobbit and are happy with this great tool. </FONT></P>
<P><FONT SIZE=2 FACE="Arial">With the critical systems view i think hobbit offers an ideal view for our Operation Center. </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Now following questions/toughts came up when we look closer;</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Acknowledge; </FONT>
<BR><FONT SIZE=2 FACE="Arial">If an alert is acknowledge from the operators in critical systems this is a fix acknowledge for the given time, also when there is a status change.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">When a problem is fixed and goes red/yellow again it will not shown up in critical view until the acked time is expired.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">This sould be an option to ack a alert until a status change (like in disable until ok).</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">The option Host-ack seems to be broken, on my system only one Test is acknowledged although the Host-ack Checkbox is selected.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Log;</FONT>
<BR><FONT SIZE=2 FACE="Arial">Missing a Log/Report from Critical view. A Report with information about the alerts and acknowledgeds information that were made in Critical systems would be helpful.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Definition (Edit Critical Systems);</FONT>
<BR><FONT SIZE=2 FACE="Arial">Easiest way for us; made standard definitions and add host to this templates. Works fine.</FONT>
<BR><FONT SIZE=2 FACE="Arial">But i miss a connection between alerts and critical view definition. Something like a option in hobbit-alerts.cfg to define that this rule is also valid for critical view. </FONT></P>
<P><FONT SIZE=2 FACE="Arial">Send a email when a alert shows up in critical view with all the possibiltys form hobbit-alerts.cfg. </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Special Case missed or belated Messages by Operation Center;</FONT>
<BR><FONT SIZE=2 FACE="Arial">Now some application/scripts sends Alerts to the Console View and the Operation Center make an alert call for each event. </FONT></P>
<P><FONT SIZE=2 FACE="Arial">A problem in Hobbit/BB is when changes happen in red messages, the Operation Center didnt realize that until the acknowledge time runs out and they make the alert call again.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">This can happen for example in the disk status test (a second filesystem goes red) or with nested Tests/Logfiles. With the Event Console they get two messages (each for one Filesystem).</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Is this anyway a topic ? How is that handled in your organisation ?</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Regards,</FONT>
<BR><FONT SIZE=2 FACE="Arial">Roland</FONT>
</P>
</BODY>
</HTML>