
# Extended Policies are called from array_policies for SenseKey related
# policies, used to change severity and define a specific event grid Code.

# Thresholds are used against hardcoded patterns in lib/Agent/MESSAGE.pm
# This will be changed to a more flexible format in 2.4

#  Severity Codes:
#   E = Error   / critical
#   W = Warning / major
#   N = Notice  / minor (not used yet)
#   I = Informational (not an Alarm, just an event)
#   X = Cancel: No Event generated, skip

# Policies for 3310,array,dsp, samfs 
# Policies are executed from top to bottom in the file.
# 
# priority= 1,2,3.. higher mean higher priority. Used to resolve 
#           multiple policies of the same severity.
# pattern=  look for this actual wording from the logs
# reverse_pattern= look for this pattern to cancel out the /pattern/
#           if the total of pattern - reverse_pat is <=0, the event is
#           changed to INFORMATIONAL.

# egrid=    pointer into the Event Advisor component field
# severity= determines Information(I), Warning(W), Error(E)
# action=   determines Actionable(1), Non-Actionable(0)
#           action is now optional, always 1 when severity is >= Error
# extended= uses the extended policies file to set severity
# key=      use this value to combine all the log entries of an array
#           matching the pattern into a single event (e.g. disks, pcus,
#           etc. = temp_threshold)
#           appended to the <device_id>.<fru_id> to make the event
#           more specific. only used to make more specific event. can
#           be used in conjunction with egrid but egrid does not have to
#           be the same value.
# code=     run some additional filtering code
# shortkey= Like key, but no <fru_id>, so all log entries are in the
#           same event if they have the same shortkey disregrading which
#           fru they came from.
# known   = 1. This means that the device must be monitored for this policy to trigger.

# threshold=Count,time-period,quiet-period,severity (W,E)
#
#  Example:
# threshold=10,24h,10h,E  # Error/actionable if 10 log-entries in 24 hours, quiet for
#                         # next 10 hours.
#                         # 24h mean 24 hours, 24m mean 24 minutes.
#                         # Severity supported is W (Warning) and E(Error actionable).
#                         # There is no event until the threshold fires.
#                         # If the threshold does not fire, the following rules in the 
#                           policy file are tried.
#
# threshold_type=device   # determine if the running counter is tied to the specific device
#                |fru     # or the specific fru that this log entry relate
                          #  default=device



