Defining a blackout policy
You can define and manage policies to black out a PATROL Agent from performing certain actions such as blacking out data, events, or recovery actions. You can schedule a blackout policy based on a predefined time frame. You can also define a blackout policy that is always active for specific PATROL Agents.
Ensure that you have the required permissions to define and manage blackout policies. For details, see Configuring Infrastructure Management to monitor and manage your infrastructure systems.
Blackout policies apply to PATROL Agents and the related data collection, events, and recovery actions. They do not apply to the behavior of the Infrastructure Management server.
- Establish a standard and provide meaningful names for blackout policies. Include an abbreviation for the managed technology, agent domain, and applications that the blackouts apply to.
- Provide a complete description for each blackout policy and put the information with the maximum impact at the beginning of the description.
- Follow the recommendations for precedence values.
- Do not create overlapping blackout policies to avoid confusion.
Blackout policies do not work with the remote monitoring OS Knowledge Modules and Knowledge Modules that are not Infrastructure Management 9.6 compliant. For such Knowledge Modules, use event management blackout configuration. Also, you can use event management blackout capability for all blackouts as your standard blackout methodology.
Blackout policy properties
Name for the policy. The policy names must be unique. In an environment with tenants, the policy names must be unique for a single tenant. It is a mandatory field.
For more information, see Policy naming guidelines.
|Description||(Optional) A brief description about the policy|
|Associated User Group||
Name of the user group that is associated with the PATROL Agents as defined in the Authorization Profile or in the PATROL Agent ACLs. The policy is applicable to these PATROL Agents.
Note: The list of user groups that is displayed includes the user groups that the logged on user belongs to. For monitoring and blackout policies, this property determines the monitoring solutions and configuration options that you have. For more information about granting or restricting access, see
This property can be viewed in READ-ONLY mode by other users of the user group. Only the owner of the policy can modify this property.
|Share with User Group
Specify whether this policy is to be shared with the users across the associated user group or not. This property can be viewed in READ-ONLY mode by other users of the associated user group. Only the owner of the policy can modify this property.
This setting is not applicable for blackout policies.
|Enable Policy||Indicates whether the policy is enabled or disabled. By default, the policy is enabled. If you disable a policy when you create it, the policy configurations are not applied to the PATROL Agents and the Infrastructure Management Servers. If you disable any existing policy, the policy configurations are removed from the PATROL Agents and the Infrastructure Management servers, where the policy was applied.|
Agent Selection Criteria
Configure the conditions to select PATROL Agents based on the following properties, and the policy is applied on the selected agents.
|Agent Host Name||
Host name of the computer on which the PATROL Agent is installed.
Note: The value for the matches property must be a strict regular expression. Some examples of regular expressions that can be used:
Port number through which the PATROL Agent listens for incoming connections from the PATROL console.
Use port numbers from 1025 to 65535.
|Agent Version||Version of the PATROL Agent.|
|Agent Operating System||Operating system of the computer on which the PATROL Agent is installed.|
|Agent IP Address||IP address of the computer on which the PATROL Agent is installed. If you select the Agent IP Address in the range condition, only IPv4 range is supported.|
|Agent Tag||Tag applied on the PATROL Agent.|
|Integration Service||PATROL Agents connected to the selected Integration Service.|
|Infrastructure Management Server||PATROL Agents connected to the selected Infrastructure Management Server.|
|Monitoring Solution Name1||PATROL Agents on which the selected monitoring solution is installed.|
|Monitoring Solution Version1||PATROL Agents on which monitoring solutions of the specified version are installed.|
|Tenant Name||Name of the tenant to which the PATROL Agent are associated via the Integration Service.|
is only applicable to PATROL Agent version 10.0 and later. 1 - The Monitoring Solution Name property
Note: The values that you enter for the properties are
You can set multiple conditions and also group the conditions to identify the agents.
|Apply Blackout To:||
Displays the following options:
|For Agent Output||
Displays the following options:
|Do Not Send Blackout Start/Stop Events (TYPE_APPLICATION_BO_EVENT)||
If you select this option, PATROL Agents do not send blackout start and stop events for the blacked out monitor instances. When you black out an Agent, all the monitor instances are automatically blacked out, and this option enables you to stop the Agent from sending start and stop events for each monitor instance.
To create a blackout policy
The following video (5:36) explains how to create and implement a blackout policy.
- Log on to the TrueSight console.
- In the navigation pane, expand Configuration and select Policies.
Click the Blackout tab and then, click Create Policy.
In the Create Blackout Policy page, specify the blackout policy properties:
- Specify the basic properties. For more information, see General properties.
Configure the conditions to select the PATROL Agents on which you want to apply the policy. For more information, see Agent Selection Criteria properties.Steps to select Agents
- Select a property.
- Select an operator to create the condition. The available operators depend on the property that you select.
- (Optional) To add more than one condition, click the button, and perform the earlier steps.
- (Optional) To group the conditions, use the following parentheses and Boolean operators from their corresponding lists:
- (Optional) To remove any existing condition, click the button.
To view the list of PATROL Agents that are selected based on the specified criteria, click Preview.
To associate time frames with the policy: In the Time Frames tab, select the time frames from the Available list and move them to the Selected list.
- The Available list includes all the time frames that you have created. For more information about creating time frames, see Defining a time frame for blackout policies
The time specified in the time frame is applied according to the PATROL Agent local time. For example, a blackout policy that is set for 3 A.M.– 6 A.M. and applied to four Agents (2 PDT, 2 EDT) makes the PATROL Agents in US Eastern Daylight Savings Time (EDT) go into blackout 3 hours before the two PATROL Agents in the US Pacific Daylight Saving Time (PDT).
- To specify the scope of blackout:
- Click the Scope tab.
- Configure the scope of blackout. For more information, see Scope properties.
- Click Save.
After you save the blackout policy, the configuration is pushed to the selected PATROL Agents.
If you remove a monitoring policy that has Agent threshold during a blackout period, events generated by the PATROL Agent do not get closed and continue to be displayed in the TrueSight console.
Where to go from here