3.15 Deleting Events from Netcool

When you acknowledge an alert, the NetIQ event status is mapped to Ack. You can also delete an event from the Netcool repository.

To delete events from Netcool:

  1. Start Administrator in the Netcool Suite program folder.

  2. In NETCOOL/OMNIbus Administrator, expand Navigator.

  3. Expand the root directory.

  4. Double-click the ObjectServer. The ObjectServer Security dialog box is displayed.

  5. Log in as root.

  6. Expand Menu and click Tools.

  7. In the Tools list, right-click Delete Action and select Edit Tool.

  8. On the SQL tab, replace the existing SQL commands with the following:

    update alerts.status set Acknowledged = 2, ExpireTime=2 where Serial in ($selected_rows.Serial);
    flush iduc
  9. On the SQL tab, ensure the Enabled check box is selected and click OK.

  10. In the Netcool/OMNIbus Event List, on the File menu, select Resync and then select All.

  11. Select the alerts you want to delete.

  12. Right-click the alerts and select Delete.

    NOTE:The Delete Action tool sets the Expire Time to 2 and Acknowledged status to 2. After two minutes, the expire trigger deletes the alert from Netcool Event List.In the Netcool/OMNIbus Administrator window, click Automation and then click Triggers. Ensure that Enabled and Group Enabled columns are set to true in the expire trigger.