Netcool体系架构介绍教学课件.ppt

* * * * * * * * * * SPEAKER NOTES: * Probes are lightweight software components that are used to obtain event information, convert it into a common format, and pass it to the ObjectServer. Because probes are completely separate from the ObjectServer, the same ObjectServer can collect events from any number of different sources. As monitoring requirements change, new probes can be added, or old probes can be removed without making changes to the ObjectServer or interrupting service. Some probes are very generic, such as the SNMP Trapd probe or the Syslog probe, while others are specific to particular applications or devices. As well as collecting event data, probes can modify and add to the event data. String manipulation functions, external lookup tables, and arithmetic operators can all be used in the interpreted probe rules file. Probes create a reliable TCP connection to the ObjectServer in order to send an event. This ensures the completeness and accuracy of data. If a probe cannot connect to the ObjectServer, it can store events until the ObjectServer becomes available again. Where a pair of ObjectServers exist, a probe can be configured for failover to send events to the alternate ObjectServer. * Deduplication is a core concept in OMNIbus. Essentially, it is a noise-reduction mechanism that recognizes when an attempt is made to insert a record into the event store with a duplicate key field. Instead of inserting another event, the Tally field of the existing event is incremented. * Correlation, another core concept in OMNIbus, recognizes event pairs (resolutions to problems). If the ObjectServer receives a link down problem event and subsequently receives a link up resolution event, it runs through a series of checks to determine the source of the resolution event. If the resolution event is paired with the problem event, both events are cleared and removed from the ObjectServer. * * * * * * * * * * Please Note: This .pot file has been created in PowerPoi