<![CDATA[Processing Event - Terminating Key]]>Hi,

In user manual, last page lists all macros available for building key and message in event processing.
Is there a way to do some regexp in the field where we define the pattern for terminating several alarms?

A kind of EVENT_ERROR_(.*) or event EVENT_[ERROR|WARNING]_%i etc.

Best regards,

Jdamien

]]>https://forum.netxms.org/topic/610/processing-event-terminating-keyRSS for NodeFri, 13 Nov 2026 12:17:34 GMTMon, 11 May 2009 14:55:43 GMT60<![CDATA[Reply to Processing Event - Terminating Key on Tue, 09 Nov 2010 12:26:56 GMT]]>Alarm termination by regular expression implemented in 1.0.7. You have to upgrade both server and management console to be able to configure it.

Best regards,
Victor

]]>https://forum.netxms.org/post/4631https://forum.netxms.org/post/4631Tue, 09 Nov 2010 12:26:56 GMT<![CDATA[Reply to Processing Event - Terminating Key on Wed, 03 Nov 2010 17:05:05 GMT]]>Thanks - we will then wait for 1.0.7.

Best regards,
Jdamien

]]>https://forum.netxms.org/post/4592https://forum.netxms.org/post/4592Wed, 03 Nov 2010 17:05:05 GMT<![CDATA[Reply to Processing Event - Terminating Key on Wed, 03 Nov 2010 10:04:25 GMT]]>Hi!

Sorry, I forgot about it 😞 Now I have added this as feature request to bugtracker (issue 309), and hopefully it will be included in 1.0.7 release.

Best regards,
Victor

]]>https://forum.netxms.org/post/4588https://forum.netxms.org/post/4588Wed, 03 Nov 2010 10:04:25 GMT<![CDATA[Reply to Processing Event - Terminating Key on Wed, 03 Nov 2010 08:54:55 GMT]]>Hi,

Any news on having regex in the termination key of the event processing (see first input in this thread to get refreshed ;-)?
Best regards,

JDamien

]]>https://forum.netxms.org/post/4587https://forum.netxms.org/post/4587Wed, 03 Nov 2010 08:54:55 GMT<![CDATA[Reply to Processing Event - Terminating Key on Tue, 12 May 2009 08:18:13 GMT]]>So in the event log, you will see the latest alarm text and severity will be increased or decreased according to last alarm, right?

That's what we call "flexibility"  🙂

JDamien

]]>https://forum.netxms.org/post/2943https://forum.netxms.org/post/2943Tue, 12 May 2009 08:18:13 GMT<![CDATA[Reply to Processing Event - Terminating Key on Tue, 12 May 2009 08:03:30 GMT]]>It's not very difficult - mostly UI change. Also, for escalation you can simply replace alarms (but this depends on how you create your alarm keys). Alarm key is also used by server to identify duplicate alarms, so if you generate new alarm with same key as existing one, server will update all fields in existing alarm except creation time, and increase repeat count.

Best regards,
Victor

]]>https://forum.netxms.org/post/2941https://forum.netxms.org/post/2941Tue, 12 May 2009 08:03:30 GMT<![CDATA[Reply to Processing Event - Terminating Key on Tue, 12 May 2009 07:32:29 GMT]]>Don't know how complex or feasible it is but here is the idea...

Today you can either "terminate alarm" by giving the message key OR "Generate new alarm". Indeed, as you say you can probably do it by defining two rules one to "terminate alarm" and a second one to "Generate new alarm". But what if you could do both in a simple rule? A rule could be defined to "terminate alarm" AND "generate new alarm".

This can be useful if you enter an escalation scenario... First alarm is "warning" then "major", following "critical"... at each step you don't need the previous alarm... and finally the clearing event which will "terminate alarm" only. But for previous step, you when to "terminate alarm" and display the new alarm...

Imagine how many rules you may get if you have many such scenarios? Allowing generation and termination in on rule would divide this number by two for those at least...

Regards,

]]>https://forum.netxms.org/post/2938https://forum.netxms.org/post/2938Tue, 12 May 2009 07:32:29 GMT<![CDATA[Reply to Processing Event - Terminating Key on Mon, 11 May 2009 22:27:20 GMT]]>@jdl said in Processing Event - Terminating Key:

By the way, is there no way to define "terminate alarm" while keeping the message in the event list?
So having access to both "terminate alarms" and "Generate new alarm" sections?

I'm not sure I understand correctly - you wish to terminate alarm and then generate new alarm immediately? Then you have to define two rules with identical matching part, first will terminate alarm, and second create new alarm.

Best regards,
Victor

]]>https://forum.netxms.org/post/2936https://forum.netxms.org/post/2936Mon, 11 May 2009 22:27:20 GMT<![CDATA[Reply to Processing Event - Terminating Key on Mon, 11 May 2009 22:25:26 GMT]]>@jdl said in Processing Event - Terminating Key:

In user manual, last page lists all macros available for building key and message in event processing.
Is there a way to do some regexp in the field where we define the pattern for terminating several alarms?

A kind of EVENT_ERROR_(.*) or event EVENT_[ERROR|WARNING]_%i etc.

No, it is not possible (but idea is very good, I'll try not to forget it and implement). Currently you have to define multiple rules to terminate each kind of alarms.

Best regards,
Victor

]]>https://forum.netxms.org/post/2935https://forum.netxms.org/post/2935Mon, 11 May 2009 22:25:26 GMT<![CDATA[Reply to Processing Event - Terminating Key on Mon, 11 May 2009 15:12:41 GMT]]>By the way, is there no way to define "terminate alarm" while keeping the message in the event list?
So having access to both "terminate alarms" and "Generate new alarm" sections?

Regards,

Jdamien

]]>https://forum.netxms.org/post/2934https://forum.netxms.org/post/2934Mon, 11 May 2009 15:12:41 GMT