H3C Technologies H3C MSR 5600 - Manual (Page 231)

218
RTM
RTM manages the creation, state machine, and execution of monitor policies.
EAA monitor policies
A monitor policy specifies the event to monitor and actions to take when the event occurs.
You can configure EAA monitor policies by using the CLI or Tcl.
A monitor policy contains the following elements:
• One event.
• At least one action.
• At least one user role.
• One running time setting.
For more information, see " Elements in a monitor policy ."
Elements in a monitor policy
Event
Table 29 shows types of events that EAA can monitor.
Table 23 Monitored events
Event type Description
CLI
CLI event occurs in response to monitored operations performed at the CLI. For example,
a command is entered, a question mark (?) is entered, or the Tab key is pressed to
complete a command.
Syslog
Syslog event occurs when the information center receives the monitored log within a
specific period.
NOTE:
The log that is generated by the EAA RTM does not trigger the monitor policy to run.
Process
Process event occurs in response to a specific state change of the monitored process
(such as an exception, shutdown, start, or restart), regardless of whether the change is
caused by an automatic system task or a manual task performed from the CLI.
Hotplug
Hotplug event occurs when the monitored card is swapped while the device is
operating.
Interface
Interface event occurs when the monitored traffic statistic and a predefined threshold
match a condition.
Each interface event is associated with two user-defined thresholds: start threshold and
restart threshold. Policy execution is always triggered by crossing of the start threshold
and crossing of the restart threshold in turn.
EAA executes the monitor policy when the monitored statistic and the start threshold
meet a predefined condition, and then it executes the monitor policy again when the
monitored statistic and the restart threshold meet a predefined condition. This process
cycles for the monitor policy to be executed and re-executed.
For example, EAA executes the monitor policy when the monitored traffic statistic is
equal to the start threshold, and then it executes the monitor policy again when the
monitored traffic statistic is equal to or higher than the restart threshold.