IBM Support

CNEA fails to group events with double colon :: in ScopeID field

Troubleshooting


Problem

Events with same ScopeID, within configured grouping Time Window, are not grouped together by CNEA.

Symptom

The CNEA services will fail to process more than one event with a double colon.
The Aggregation Collator service will give a message for the first events, saying "Unable to process dedup member (json exception)"

Cause

Double colon has special meaning for the dedup pod and is used as a field separator.

Environment

Steps to reproduce the behavior:

  1. Set the logs for the Aggregation Collator Service to TRACE by updating the LOG_LEVEL in its deployment
  2. Update two Object Server events to set FirstOccurrence = getdate() and ScopeID = "FX::Blank Site"
  3. The events will not be grouped - their CEACorrelationKey will not be updated.
  4. The Log file for the Aggregation Collator will show the error above.

Diagnosing The Problem

Check for  "Unable to process dedup member (json exception)" in the logs for the aggregation collator pod.

Resolving The Problem

To resolve the issue, ensure populated ScopeID fields do not contain double colons. Navigate to Insights->Scope Based Grouping to see the policies for setting ScopeID See here for more details
Release 1.6.10 of Event Manager will contain a code fix for this issue. 

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTPTP","label":"Netcool Operations Insight"},"ARM Category":[{"code":"a8m0z000000blQ0AAI","label":"NOI Netcool Operations Insights-\u003EScope Based Event Grouping"}],"ARM Case Number":"TS011818312","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
04 September 2023

UID

ibm17004983