Automatic Event Aging

From the Event Configuration page (ADVANCED > Settings > Events), you can set up automatic aging of events. Aging of events will automatically update active events that match the severity and aging threshold to a status of Aged. After the configured event archive interval, all Closed, Aged, and Cleared events are moved to the event archive.

Properties that control this behavior are:

  • Don't Age This Severity and Above - Options are Age All Events, Critical, Error, Warning, Info, Debug, and Clear. By default, this value is set to Error, meaning that all events with a status of Error or Critical are not aged.
  • Event Aging Threshold (minutes) - Set the time value, in minutes, that an event must reach before it is aged. By default, this is 240 minutes.
  • Event Aging Interval (milliseconds) - The interval when events are scanned to perform autoaging. By default, this is 60000 milliseconds (60 sec).
  • Event Aging Limit - The maximum number of events to age in each interval. The limit should be kept relatively low to prevent large database transactions. By default, this is 1000 events.
  • Event Archive Threshold (minutes) - Specify the number of minutes since a closed event was last seen before it is moved to the event archive. The minimum value is 1; the maximum value is 43200.
  • Event Archive Interval (milliseconds) - The interval when events are scanned for moving to the archive. By default, this is 60000 milliseconds (60 sec).
  • Event Archive Limit - The maximum number of events to archive in each interval. The limit should be kept relatively low to prevent large database transactions. By default, this is 1000 events.
  • Delete Archived Events Older Than (days) - The number of days that events in the event archive are saved. By default, they are kept in the archive for 90 days. The minimum value is 1 and the maximum value is determined by the range of event archive partitions. With the default configuration, the maximum value is 1000 days.
  • Default Syslog Priority - Specify the default severity level assigned to an event coming from zensyslog if no priority can be determined from the event.
  • Default Availability Report (days) - Enter the number of days to include in the automatically generated Availability Report. This report shows a graphical summary of availability and status.
  • Max Event Size in Bytes - The maximum size of an event that will be processed in bytes. Events that are too large will be logged and dropped. Events that will become too big will have their details overwritten with new details. By default, this is 32768 bytes.
  • Summary Index Interval (milliseconds) - The default indexing interval of the event summary in milliseconds. By default, this is 1000 milliseconds (1 sec).
  • Archive Index Interval (milliseconds) - The default indexing interval of the event archive in milliseconds. By default, this is 30000 milliseconds (30 sec).
  • Index Limit - The number of events to index in each index interval. By default, this is 1000 events.
  • Event Time Purge Interval (days) - The number of days that event occurrence time are kept. By default, they are kept for 7 days. The minimum value is 1 and the maximum value is determined by the range of event time partitions. With the default configuration, the maximum value is 7 days.
  • Enable Event Flapping Detection - Select this check box if you wish to enable event flapping detection. If an event is created and then cleared flapping_threshold times in event_flapping_interval time then an event of event flapping event class is created.
  • Event Flapping Event Class - The event class under which generated flapping events belong.
  • Clear Event Heartbeats - Click Clear to clear the event heartbeats.