EMS Manual

EMS Manual—426909-005

7-1

Burst Detection and Suppression

This section describes the burst detection and suppression (BDS) and specific-event

suppression features of EMS:

For more information about the structure of filter tables and burst filters, see Section 6,

Filter Tables and Burst Filters.

Event Suppression Strategies

An event burst occurs when a similar event is issued repeatedly. Unwanted and

redundant event messages waste system resources and can prevent other more

critical problems from being quickly detected and corrected.

EMS supports two strategies for detecting and suppressing event bursts and specific

event types:

Suppressing Event Bursts

Within a specific collector or distributor process, you can detect and suppress all event

bursts that exceed a specified number and time duration.

This strategy requires the use of burst filters (or collector program keywords) to enable

BDS. For primary and alternate collectors, you can enable BDS programmatically,

using either the SUPPRESS or FILTER keyword in the EMSACOLL and EMSCCTRL

programs.

For distributors, BDS can be enabled only by using the EMSDIST program or the

distributor ADD command to add a burst filter that contains the BDS directives. For

EMSDIST syntax guidelines, see EMSDIST—Distributor Program

on page 13-34. For

information about the ADD command, see ADD Command (ZCOM-CMD-ADD) on

page 17-12.

Suppressing All Events of a Specific Type

Within a specific collector or distributor process, detect and suppress all events of a

specific type even if they are not repeated (for example, as in an event burst).

Topic Page

Event Suppression Strategies

7-1

BDS Features 7-2

Implementing BDS 7-6

Implementing Specific-Event Suppression 7-7

Types of Collector Events BDS and PLF Do Not Suppress 7-9