Troubleshooting
Problem
CNEA generated synthetic parents are processed by on-prem Event Analytics and their CEAImpactPatternScopeId column may contain data.
Symptom
CNEA generated synthetic parents are processed by on-prem Event Analytics. This could mean that the parents are included in other groups. The CEAImpactPatternScopeId column is populated for CNEA generated synthetic parents.
Cause
The filter for ProcessRelatedEventPatterns does not exclude CNEA generated synthetic parents. On-prem Event Analytics knows not to process its own generated synthetic parents. This is achieved by the Manager != 'Related Events' clause in the restriction filter of the ProcessRelatedEventPatterns event reader service. However, CNEA generated synthetic parents are not excluded from processing.
Environment
The issue can occur on a Hybrid setup where on-prem Event Analytics are connected to CNEA. Details are here.
Diagnosing The Problem
Look for a value in the CEAImpactPatternScopeId column for CNEA generated synthetic parents.
Resolving The Problem
To resolve the problem, upgrade on-prem Netcool/Impact to FP29 when available. FP29 will append "and Class != 99992" to the restriction filter for ProcessRelatedEventPatterns as long as the out-of-the-box restriction filter has not been tampered with. After FP29 has been applies, if the restriction filter had already been updated with custom changes, then "and Class != 99992" should be manually added to the restriction clause, by editing the Service in the Impact UI.
i.e. the problem can be manually resolved by editing the ProcessRelatedEventPatterns event reader Service via the Impact GUI. In the Event Mapping tab, edit the Restriction filter to include a clause for the "CEA Incident" class. To see the value set for this class, select from the alerts.conversions table in Omnibus where Conversion = 'CEA Incident'. By default, the Value is 99992.
| 99992 | CEA Incident |
For example, change the Restriction Filter for the ProcessRelatedEventPatterns event reader Service to the below:
IBMExtractedType != '' AND IBMProcessingStage != 1001 AND Manager != 'Related Events' AND Class != 99992
And restart the Service for the change to take effect.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTPTP","label":"Netcool Operations Insight"},"ARM Category":[{"code":"a8m500000008a6hAAA","label":"NOI Netcool Operations Insights-\u003ERelated Events"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.6.4;1.6.5;1.6.6"}]
Was this topic helpful?
Document Information
Modified date:
24 January 2023
UID
ibm16855357