We have an SVM setup for an internal customer who creates persistent volumes for k8s vms using the trident driver. We have specific alerting setup for them in Active IQ that works for their needs, but we also use Ontap events for our purposes. Their volumes often fill up and then we get spammed with Ontap events for vol.wafl.full. Their volumes are created via the API and are added and removed as k8s vm's request resources, but they all volume names are prepended with "trident_pvc_"
Example vol names:
trident_pvc_836e672...
trident_pvc_836e073...
trident_pvc_836e332...
Is there a way to exclude the event wafl.vol.full and match to only volumes that start with the string "trident_pvc"?
I do not want to to exclude all wafl.vol.full events
This is what we currently use for a catch all:
Filter Name Rule Rule Message Name SNMP Trap Type Severity
Position Type
----------- -------- --------- ---------------------- --------------- --------
storageteam
10 include * * EMERGENCY, ALERT, ERROR
11 exclude * * *