IBM Support

Netcool Web GUI Event Viewer does not display correct event count when Event Relationship is used in the View

Question & Answer


Question

Why Netcool Web GUI Event Viewer does not display all the events when Event Relationship is used in the View definition?

Answer

Following shows a scenario where event count in the left pane, and the events displayed in the right pane can be different.
1). Suppose we have an Event Relationship defined as follows:
 
image-20240508121904-1
2). We have created two Views with the following names:

Not_using_Relationships_Cloud_Analytics
In this view definition we have selected AlertGroup under the "Group Columns" tab and not using any relationship under the Relationship tab.
 
Copy_IBM_CloudAnalytics
In this view definition we have selected AlertGroup under the "Group Columns" tab and we are using "IBM Cloud Analytics" relationship under the Relationship tab. See above screen shot for Relationship definition.
3). Open the Event Viewer and use "Not_using_Relationships_Cloud_Analytics" view.
The ConnectionStatus group shows event count 9 on the left side, and same number of events are showing on the right side. As mentioned above this view does not use any relationship.  Note that some of the ParentIdentifiers have values and other are empty. Since all of these events belong to ConnectionStatus group so we are displaying all of these events, regardless what is the value of ParentIdentifier.

image-20240508124027-2

In above screen shot ParentIdentifier (SIDP:1683743473:evtmanager-ncoprimary-0.) is the parent of 5 events.

In the following we want to check which alert group these events belong to, so we are using a quick filter to filter events. As you can see in the following screen shot the Identifier (which is same as ParentIdentifier in above screen shot) has AlertGroup ScopeIDParent.

image-20240508125213-4

4). Now in the Event Viewer select Copy_IBM_CloudAnalytics view.

As you can see below, 9 events belong to AlertGroup ConnectionStatus.  If you click on ConnectionStatus on the left side you do not see the events which has ParentIdentifier SIDP:1683743473:evtmanager-ncoprimary-0. The reason is that both of the following conditions has to be satisfied for the events to be displayed on the right side:

a). All of the events belong to same AlertGroup
b). The Event Repaltionship is satisfied.

In this case event Identifier (SIDP:1683743473:evtmanager-ncoprimary-0) belongs to AlertGroup "ScopeIDParent" (not ConnectionStatus). Since this event is Parent of 5 events so this event and its child events are not displayed in the right pane.

image-20240508124644-3
If you are seeing above issue then check the event data and make sure that the events has valid relationship, and if you are using grouping then the events belong to the same group.

[{"Type":"MASTER","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSSHTQ","label":"Tivoli Netcool\/OMNIbus"},"ARM Category":[{"code":"a8m500000008a1EAAQ","label":"WebGUI-\u003EFeatures-\u003EEvent Viewer"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
08 May 2024

UID

ibm17150585