什么会导致 EMS 消息被丢弃？
适用于
ONTAP 9
问题解答
- 该事件被 EMS 抑制算法抑制。
- 事件处理系统实现了几种算法来限制事件。
- 使用 event status show 命令获取有关禁止事件的信息
ontap91::> set diag -confirmation off; event status show -message-name security.invalid.login -ins
Node: ontap91-01Message Name: security.invalid.loginNumber of Indications: 13Number of Drops: 11 Last Indication Time: 6/2/2020 10:27:54Last Suppressed Indication Time: 6/2/2020 10:27:54Last Processed Indication Time: 6/2/2020 10:25:41Stat Starting Time: 6/1/2020 12:42:5960-minute Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 024-hour Histogram: 0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 0, 0, 0, 0,0, 0, 0, 0, 0, 07-day Histogram: 0, 0, 6, 7, 0, 0, 0Is Chatter: falseChange since Last Chatter Calculation?: falseNumber of Times Autosuppressed: 0Number of Times Rate Limited: 0Number of Times Timer Suppressed: 11 Number of Times Duplicate Suppressed: 0Number of Times Suppressed Since Last Time Logged: 5Accumulated Bytes: 491Severity: SVC_FAULTProbability to Suppress: 0%Number of Times Duplicate Suppressed (-30 secs): 0Number of Times Duplicate Suppressed (30-60 secs): 0Number of Times Duplicate Suppressed (60-90 secs): 0Number of Times Duplicate Suppressed (90-120 secs): 0Number of Times Duplicate Suppressed (120- secs): 0追加信息
- 使用 event config show 确定事件抑制算法是启用（"on"）还是禁用（"off"）。
- 有关抑制算法的详细信息，请参见 diag 命令
event show-suppression。ontap914::*> event show-suppression
Node: ontap914-01
Time since rotate (t0): 489618s Autosuppression enabled: true
Time to next rotate (t1): 115182s Past startup time ( 10m): true
Time scale (ts=t1/t0):
0.2352487040917613 Past min log size ( 2048): trueTarget max bytes (T): 36700160 Per event chatter threshold:
1520769
Accumulated bytes (A): 4119384
Bytes remaining (B=T-A): 32581072 Number of events not subject
Predicted bytes (P=A*ts): 969010 to autosuppression: 3012
Of events subject to autosuppression
AutoSuppression probability number suppressed: 720
(a=max(0,(P-B)/P)): 0% number rate limited: 0
number not suppressed: 8826
Total indications: 12639 duplicates suppressed: 51
duplicates suppressed
in 30 seconds: 10
duplicates suppressed
in 60 seconds: 5
duplicates suppressed
in 90 seconds: 4
duplicates suppressed
in 120 seconds: 8
duplicates suppressed
after 120 seconds: 0
timer suppressed: 3
Node: ontap914-02
Time since rotate (t0): 489627s Autosuppression enabled: true
Time to next rotate (t1): 115173s Past startup time ( 10m): true
Time scale (ts=t1/t0):
0.2352259985662555 Past min log size ( 2048): trueTarget max bytes (T): 36700160 Per event chatter threshold: 890109
Accumulated bytes (A): 2613303
Bytes remaining (B=T-A): 34087151 Number of events not subject
Predicted bytes (P=A*ts): 614647 to autosuppression: 2268
Of events subject to autosuppression
AutoSuppression probability number suppressed: 0
(a=max(0,(P-B)/P)): 0% number rate limited: 0
number not suppressed: 5144
Total indications: 7488 duplicates suppressed: 61
duplicates suppressed
in 30 seconds: 2
duplicates suppressed
in 60 seconds: 3
duplicates suppressed
in 90 seconds: 5
duplicates suppressed
in 120 seconds: 2
duplicates suppressed
after 120 seconds: 0
timer suppressed: 3
2 entries were displayed.