Troubleshooting infrastructure events

This section lists how to troubleshoot issues related to infrastructure events.

Events are not cleaned up in the Presentation Server

Issue

If you use the pw event delete all –cleanup command to clean up events in the Infrastructure Management server, the same events still show up in the Presentation Server.

Resolution

Run the following command from the InstalledDirectory\truesightpserver\bin folder to clean up events in the Presentation Server:

tssh event delete all <Infrastructure Management server name>

Infrastructure Management events are pruned early

The events pruning time set in the TrueSight Presentation Server affects all the Infrastructure Management Servers registered to it.

The default pruning time is 24 hours for both the Presentation Server and Infrastructure Management Servers.

If you change the pruning time in any of the Infrastructure Management Servers, you need to set the Presentation Server pruning time to the highest pruning value across the Infrastructure Management Servers.

From the command-line interface, change the value of the EVENTS_PRUNING_PERIOD configuration entry:

tssh properties set EVENTS_PRUNING_PERIOD <value>
tssh properties reload

The event count between the Presentation Server and the Infrastructure Management Server do not match

Issue

The number of events displayed in the TrueSight console and the Infrastructure Management operator console do not match.

Causes

• In case your environment has a large event flow and the mcell.conf at the Infrastructure Management Server has a lower setting for EventDBSize (default is 360000), older events get pruned automatically irrespective of Severity or Status. You are able to view events in the TrueSight console that you cannot view in the Infrastructure Management operator console. You cannot perform any actions on these events.
• The Infrastructure Management JServer retains pruned events for more than 20 minutes after events are pruned in the cell.
• The Presentation Server has a self-pruning period (EVENTS_PRUNING_PERIOD) to prune events.

Resolution

Events are pruned at the Presentation Server as follows:

• Closed events are pruned based on the MC_CELL_DB_CLEANUP events arrival. Closed events older than 24 hours are pruned during this time.

  From the command-line interface, execute the following command to change the events pruning interval: 

  tssh properties set EVENTS_PRUNING_PERIOD <value in minutes>

• In the absence of MC_CELL_DB_CLEANUP events, the Presentation Server prunes closed events every 24 hours.

  Use the tssh properties set command to increase or decrease the time interval.

• Open events are pruned if there are no updates to the event for more than 30 days.
  From the command-line interface, execute the following command to change the open events pruning interval:

  tssh properties set openEventsPruningPeriod <value in minutes>

Users cannot perform event operations after cross-launching to BMC TrueSight Infrastructure Management

Users belonging to non out-of-the-box user groups might not be able to perform event operations after cross-launching to BMC TrueSight Infrastructure Management. Event operations for the same event are possible in the TrueSight console.

On the BMC TrueSight Infrastructure Management Server that you are cross-launching to, add the user group to the .mrl file. For more information, see Adding user groups to the .mrl file.

Related topics

Troubleshooting

Troubleshooting the deployment of TrueSight Operations Management components