Message Storm Detection

The boom agent is able to detect and stop message storms to avoid an indication flood on the boom server. The single policy which caused the storm will be automatically blocked for a specified time interval if the configured message rate is reached within 1 minute.

Agent specific Configuration Variables

The agent's message storm detection component uses two configuration variables to prevent message storms:

MSD_MAX_PER_MINUTE maximum messages per minute
MSD_BLOCK_MINUTES blocking period in minutes

MSD_MAX_PER_MINUTE specifies how many messages can arrive per minute before a message storm is detected and the single policy is blocked for the time interval MSD_Block_MINUTES.

Example:
MSD_BLOCK_MINUTES=5
MSD_MAX_PER_MINUTE=500
The policy which caused the message storm is blocked for 5 minutes if more than 500 indications per minute are created.

Note:Only MATCHED MESSAGES and SEND MESSAGES are taking into account. So it EXCLUDES unmatched messages and messages matched with STOP condition.

Set/Deactivate/Check Message Strom Detection

Use the remote agent actions in the GUI to Set/Deactivate/Check the Message Storm Detection parameters on an agent basis. Select the "Actions" button in the boom GUI. In the BOOM_AGENTS_v2.65 tree you will find two agent actions:

Check the Message Storm Detection settings:

Use "Get Message Storm Detection settings" to get the current settings.

Set Message Storm Detection:

Use "Set Message Storm Detection settings" to enable Message Storm Detection.

MaxMessagesPerMinute=[maximum number of messages per minute]
BlockTimeMinutes=[blocking period in minutes

Deactivate Message Storm Detection:

Use "Set Message Storm Detection settings" to deactivate Message Storm Detection.

To deactivate Message Storm Detection set the following parameters to 0:
MaxMessagesPerMinute=0
BlockTimeMinutes=0

Indications generated on the boom server

A critical indication is generated when a message storm for an agent is detected.

An normal indication is generated when the message storm is over.