If our new platform provides a reporting log that doesn't get passed into Zenoss, then we can write a daemon to extract these messages and create events from these messages. As an example, AIX records certain low-level events such as hardware issues and core dumps into a circular log. If we wanted to extract this information using a tool like errpt, then we would need to write a daemon that is capable of recording the last time that we saw an event, log into the AIX server and grab the errpt information and convert that entry into a Zenoss event.
Once we have events coming into Zenoss, we might become aware of certain peculiarities in our events such a certain informational message actually indicates that any previous critical failures are over. In order to cut down on the amount of false alarms, we should create an event mapping that would examine informational messages and clear out any critical events.