The process of managing faults and errors can be summarized as follows:
First, events must be collected. Usually, faults come in from a variety of sources through several different methods or protocols, such as SNMP notifications, syslog messages, entries in log files, or NMS events.
Next, the events should be normalized to facilitate their processing. Normalizing means to format the events in a consistent way.
Next, you must decide if the event can be filtered. Filtering means to identify events that don't need to be processed immediately, or ever. Because the volume of events to be processed can be very high, it is important to filter undesired events as early as possible.
Next, the management system should correlate events and determine ...