HPE NonStop & closed when off

[smitty3501]

seems one of my analyst rules isn't trigging.     I gor alerts for >89  but none for >79.  see some minor differneces in the rules but wonder what "clsed when off" doess....I inherited this

!=======================================
RULE File_Full_C3_BOC PRIMARY DISABLED
!
! INCLUDE
! $DAT*.BOCPFILE.*
!
! EXCLUDE
! $DAT*.BOCPFILE.LHMSGE*
!
NUMERIC mFull
STRING fName
STRING gName
STRING aMsg

RECORD EXCEPT
WHERE FILEFULL > 79 AND
FILENAME matches REGEX "^\$DAT.+\.BOCPFILE\." and
FILENAME NOT matches REGEX "^\$DAT.+\.BOCPFILE\.LHMSGE"
REFRESH 1 MINUTES
CLOSE_WHEN_OFF

! -----------------------------------

IF ALL
SET mFull := 80
SET aMsg := "C3 FILE Full"
SET fName := @except.filename
SET gName := "C3"
LOG 0101 IMMEDIATELY
LOG EMS 0101 EVENTNUMBER 6307 COLLECTOR $CPRG IMMEDIATELY

LOG 0131 WHEN_CLOSED
! LOG EMS 0131 EVENTNUMBER 6308 COLLECTOR $CPRG WHEN_CLOSED
END_IF

END_RULE

!===================================
RULE File_Full_C3_BOC_rpt PRIMARY DISABLED
!
! INCLUDE
! $DAT*.BOCPFILE.*
!
! EXCLUDE
! $DAT*.BOCPFILE.LHMSGE*
!
NUMERIC mFull
STRING fName
STRING gName
STRING cFlag
STRING aMsg

RECORD EXCEPT
WHERE FILEFULL > 89 AND
FILENAME matches REGEX "^\$DAT.+\.BOCPFILE\." and
FILENAME NOT matches REGEX "^\$DAT.+\.BOCPFILE\.LHMSGE"
REFRESH 5 MINUTES
EVERY 1 HOURS

! -----------------------------------

IF ALL
SET mFull := 90
SET aMsg := "C3 FILE Full"
SET fName := @except.filename
SET gName := "C3"
LOG 0101 IMMEDIATELY
LOG EMS 0101 EVENTNUMBER 6307 COLLECTOR $CPRG IMMEDIATELY

LOG 0131 WHEN_CLOSED
! LOG EMS 0131 EVENTNUMBER 6308 COLLECTOR $CPRG WHEN_CLOSED
END_IF

END_RULE

Salvage60%

[Leon_Arens]

It is possible the File_Full_C3_BOC rule triggered when the file originaly went over 79% full and will not trigger again untils the file drops below 80% because you have the "CLOSE_WHEN_OFF"  set.   

If the file stays over 89% full the File_Full_C3_BOC_rpt rule will trigger every hour because you do not have the "CLOSE_WHEN_OFF" set and you have "EVERY 1 HOURS" in the rule.

The following URL describes how the "CLOSE_WHEN_OFF" works.

https://help.prognosis.com/server/120/system-functions/analyst/writing-analyst-rules/analyst-rule-pr...

I noticed that both rules were configured to be disabled.   I am assuming these rules get started after the analyst was started.