(updated for server version 5.24 or later)
The alarm EMS / User defined provides a method to generate an alarm based on the content of an EMS message. The EMS message may be located in $0 or in another EMS collector that MOMI can access.
The alarm is triggered, and potentially cleared, by defining a series of logical conditions. The criteria for the logical conditions are entered into the text area next to the selections of "Include if ANY", "Include if ALL", "Exclude if ANY" and "Exclude if ALL". Each selection has its own text area where zero or more lines of text are entered. A line of text is evaluated in its entirety. For example, "Fred Smith" is considered as one single entry whereas one line of "Fred" and a second line of "Smith" means that these words may appear anywhere within the EMS message (i.e. don't have to be together). The text comparison is not case sensitive.
If criteria for "include" is successful, while considering "excludes", then the alarm is triggered, or potentially cleared. Here is the general order of how entered text (i.e. criteria) is evaluated:
Note that Excludes are evaluated first. Any 'match' of excludes means that no alarm is generated. Once Excludes are evaluated, then Includes are examined. It is necessary to successfully match an Include in order to generate an alarm.
The EMS Set tab fields are used to determine if an alarm is generated. The EMS Clear fields, which are optional, are used to determine if an alarm triggered by EMS Set should be automatically cleared.
Data entered within EMS Set and EMS Clear by default is matched with virtually the entire ASCII text of the EMS message. To limit the search, push the Limit By type button and select the portion of the message to search. A 'tag' is displayed in the text line indicating the portion of the message to search.
EMS messages with an SSID of BWS, which is the SSID used by MOMI, are ignored. This prevents a potential "looping" situation where an Alarm triggered by an EMS message, causes an EMS message that triggers an alarm, that causes an EMS message that triggers an alarm, and so on...