(updated for server version 6.04 or later)
The alarm EMS / User defined provides a method to generate an alarm based on the content of an EMS event. The EMS event may be located in $0 or in another EMS collector that MOMI can access.
An alarm is triggered, and potentially cleared, by defining matching text within a series of logical conditions. This criteria is entered into the text area next to the selections of Include if ANY, Include if ALL, Exclude if ANY and Exclude if ALL. Each section has its own text area where zero or more lines of text are entered. A line of text is matched in its entirety. For example, "Fred Smith" is considered as one single entry whereas one line of "Fred" and a second line of "Smith" means that these words may appear anywhere within the EMS message (i.e. don't have to be together). Comparisons are not case sensitive.
If text entered in includes is successful, after considering any excludes, then the alarm is triggered under EMS Set or cleared if under EMS Clear. For each EMS event examined, the EMS Set is examined first and processing stops if an alarm is triggered. Criteria under EMS Clear, if present, is considered only if criteria under EMS Set fails to match. Below is the general order of evaluation for criteria under both EMS Set and EMS Clear:
Note that Excludes are evaluated first and any "logical match" means that no alarm is generated or cleared. Once Excludes are evaluated, then Includes are examined. It is necessary to successfully match Includes in order to generate or clear an alarm.
While not specified, prior to MOMI Client and Server 6.04 an OR was implied for Excludes and Includes. A text match of Exclude if AnyORExclude if ALL caused an EMS message to be ignored. A text match of Include if ALLORInclude if ANY caused a match which would either generate or clear an alarm. As of MOMI Client and Server 6.04 and later OR is now displayed and the logical operand of AND is now available. The default remains OR. Include if ALL AND Include if ANY requires a match of both in order to generate or clear an alarm.
Text entered within EMS Set and EMS Clear by default are matched with virtually the entire ASCII text of the EMS event. To limit the search, push the Limit By type button and select the portion of the message to search. A tag is displayed in the text line indicating the portion of the message to search and text should immediately follow.
EMS messages with an SSID of BWS, which is the SSID used by MOMI, are ignored. This prevents a potential "looping" situation where an Alarm triggered by an EMS message, causes an EMS message that triggers an alarm, that causes an EMS message that triggers an alarm, and so on...