NetXMS Forum

Hi, if you need rule to work only for specific node it is easier to put that node into "Source" list and not attempt to filter it in the script. Best regards, Victor

Finally I've done it with Hook:ConfigurationPoll and I check for both "node name" and "Interface name" as well. If it matches both of them then I set Interface Expected State to Ignore interfaces = GetNodeInterfaces($node); foreach (interface : interfaces) { if ( $node->name ~="(?i)Node1Name" && interface->name ~= "(?i)tun.*" ){ SetInterfaceExpectedState(interface, "IGNORE"); }else if ( $node->name ~="(?i)Node2Name" && interface->name ~= "(?i)tun.*|vmnet.*|docker.*|docker_gwbridge|vboxnet.*" ){ SetInterfaceExpectedState(interface, "IGNORE");} }

I've done it little different, What I was trying to do, is from a new event policy I selected the specific interfaces I wanted as source objects, but it was not working for some reason, It excecuted the general policy I had. What I mean, I had that specific policy if it match to send an email to one account. The general policy for interface down has another email account as action. When the interface changed state it only send email to the general policy. What I then did is in the event policy I removed the source object and add a filtering script. What I've written down is: IF ((($node ==Node-Name) && ($object == Interface-Name)) || (($node == Node-Name) && ($object == Interface-Name))) well this works fine as I want, it sends email on both email addresses as I want but netxms gives me a Minor Alarm. Event: SYS_SCRIPT_ERROR message :Script(EPP::6) execution error: Error 11 in line 1:Function not found Do you have any idea why this is an error as function not found, despite the fact the the policy works fine. Also why the policy does not work when I select the source objects from the Source object field Thank you in advance 1st Problem Found: the function should be in lowercases: if if ((($node ==Node-Name) && ($object == Interface-Name)) || (($node == Node-Name) && ($object == Interface-Name))) Well I speaked too soon, the problem is now that for whatever interface that gets down the second emails gets all alerts, so it does not work as expected Found the solution: if (($1 == Interface-ID)||($1 == Interface-ID)||($1 == Interface-ID)) return true; return false; So now it works as it should. When on those interfaces it sends on both emails, on every other interface it sends only on the general email

Some very basic links regarding event processing and scripting: https://www.netxms.org/documentation/adminguide/event-processing.html https://www.netxms.org/documentation/adminguide/scripting.html#scripting There are several event processing policies related to interface state changes, which you can either change or disable and configure your own. You could for example add a filtering script that checks if a node is reachable via SNMP prior to triggering an alert. That way, if the node was down, you would receive the node down, but not the interface down alerts. If the node was up, the interface down alerts would still come through: snmpTransport = CreateSNMPTransport($node); if ( snmpTransport == null ) return false; return true; Technically NetXMS should be detecting that the node is down and thus not alert on the interfaces going down as well. I am not sure if that works or doesn't work - as I said, we are not alerting on that. That also still doesn't help you if you have a whole bunch of interfaces go down while the node is still up. Not sure how NetXMS is supposed to group those into a single email alert, as the events come in individually. To group them, NetXMS would have to delay sending the email for the first event while waiting to see if any additional events come in. Maybe the AlarmSummaryEmailSchedule, AlarmSummaryEmailRecipients and EnableAlarmSummaryEmails Server Configuration options can help you with that. I am not sure how much flexibility you require in regards to email recipients for different devices. We have never used these summaries, so I actually do not know how they look like at all.

The problem appeared again when someone did a restart on the pc, The agent is up, i can telnet on the port but imideately it closes the connection, while on another pc which I can poll data the connection remains on when I telnet. I did a configuration full poll and the problem still remains. [20.03.2018 12:45:52] **** Poll request sent to server **** [20.03.2018 12:45:52] Poll request accepted [20.03.2018 12:45:52] Starting configuration poll for node XXX PC [20.03.2018 12:45:52] Capability reset [20.03.2018 12:45:52] Checking node's capabilities... [20.03.2018 12:45:52] Checking NetXMS agent... [20.03.2018 12:45:52] Capability check finished [20.03.2018 12:45:52] Checking interface configuration... [20.03.2018 12:45:52] Unable to get interface list from node [20.03.2018 12:45:52] Interface "unknown" is no longer exist [20.03.2018 12:45:53] Interface configuration check finished [20.03.2018 12:45:53] Checking node name [20.03.2018 12:45:53] Node name is OK [20.03.2018 12:45:53] Finished configuration poll for node XXX PC [20.03.2018 12:45:53] Node configuration was not changed after poll [20.03.2018 12:45:53] **** Poll completed successfully **** EDIT: on agent debug it says connection from x.x.x.x rejected 2nd edit: the problem was the DNS resolving on netxms agent I had as Master server the dns and the pc could not resolve it. I added also the IP and the issue resolved for now