When the message handler receives a message event (SNMP trap, syslog, Windows EventLog), it is published to Traverse's the internal communication system. The published event is accepted by the BVE for event deduplication (Event Deduplication ) and the DGE for archival. In a typical Traverse deployment, the Message Handler and DGE components operate on the same server. The Message Handler is paired with the local DGE and there are no additional configuration steps.
However, because of the hub-and-spoke model of the Traverse internal communication system, the event traverses the entire DGE-BVE path before returning to the originating host. In large Traverse deployments, this may add extra overhead to the Traverse communication system. Additionally, if a device is configured to send events to multiple Message Handlers, each message handler publishes the processed event resulting in duplicate events in the Event Manager console.
To avoid this scenario, you can pair one or more DGE with a message server.
Superusers can access the Message Server Pairing page by navigating to Administration > Other > Message Handler Configuration.
Message Server Pairing
Note: You can pair the same DGE with multiple Message Servers.
Pairing DGEs to a Message Handler
All detected Message Handlers display in this page.
Note: If you select Direct, the event still publishes to the Traverse communication system for deduplication and display in the Event Manager console, but the event does not return to the DGE for archival.