Deciding Where to Place Rules

The PATROL KM for Event Management rules specify parameter and notification settings. Rules can exist on either the remote agents you are monitoring or the notification server or on both. Some rules must exist only in one place. The following table discusses the advantages and disadvantages of rule locations.

Recommended Rule Location

Rule Type	Recommended Location	Advantage	Disadvantage
Targets (notification recipients)	notification server	Easier to manage Less processing at managed nodes reduces PATROL resource consumption	More processing is performed at the notification server
Alert Messages (wording and content of notification messages)	remote agent	Reduces the number of rules at the notification server Since messages are reworded before arriving at the notification server, you don't need a second level of notification servers to properly send messages to an enterprise console.	More difficult to manage the rules on multiple remote agents
Blackouts	remote agent	Reduces network traffic Reduces processing at the notification server	More difficult to manage the rules on multiple remote agents
Alert Action (what to do when an alert occurs)	remote agent only	The alert action must be defined on the remote agent where PATROL alerts are generated.
Parameter Settings (thresholds and poll times)	remote agent only	The parameter settings must be defined on the remote agent where PATROL alerts are generated.
Alert Resend (whether to resend outstanding alerts)	remote agent only	The alert resend settings must be defined on the remote agent where the PATROL alerts are generated.
Notification Command (the script used to send notifications)	notification server only	The notification script must be defined on a notification server that sends notifications. If you are not using notification servers, the remote agent, in effect, acts as the notification server. In this case, the notification command rule resides on the remote agent.
Send Reset on Init (whether to close old events when agent restarts)	remote agent only	The Send Reset on Init setting must be defined on the remote agent where PATROL alerts are generated.
Custom Identifiers	remote agent only	Custom identifiers must be defined on the remote agent where message rewording is taking place.
Recover y Actions	remote agent only	Recovery actions settings must be defined on the remote agent where PATROL events are generated and where you expect the recovery action to occur.

Deciding Where to Place Rules

On this page