Mail Archive Search: <+subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[NV\-L\]\s+Ruleset\s+Editing\s+Questions\s*$/>

Results:

References: [ +subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*\[NV\-L\]\s+Ruleset\s+Editing\s+Questions\s*$/: 16 ]

Total 16 documents matching your query.

1. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: James Shanks <jshanks AT us.ibm DOT com>; Date: Tue, 24 Oct 2006 09:16:15 -0400; If you use xnmtrap and set the trap to "Log Only" It will not be sent to TEC nor display in your event windows but it will be kept in trapd.log so that you can gauge how many you are getting. You can; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00086.html (18,134 bytes)
2. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 09:40:07 -0400; Thanks James, So to use "Log Only" I will have to load or build the trap entries in the trapd.conf? The <> was meant to imply the "not equal to" option. Sean Lawrence Systems Automation Ext 5728 Jame; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00087.html (16,042 bytes)
3. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 09:56:57 -0400; Ok I ran the "nvcdebug -n" command. The output is as follows 2006/24/10 09:46:38 CorrelationDef.C[562] : Current running correlation: CorrelationDefinition(0x30033b08) + RootDnode + + RuleSet forward; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00088.html (17,185 bytes)
4. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: Greg Keetch <gkeetch AT ca.ibm DOT com>; Date: Tue, 24 Oct 2006 07:25:54 -0700; Hello, The forwardall.rs ruleset is used be default in the Event Display, so this is where it is probably getting loaded. There is no relationship between the rulesets that are used by ESE.automation; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00089.html (19,774 bytes)
5. [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 08:13:55 -0400; I am trying to set up some rules to filter out traps coming for Ciscoworks. We are getting way to many now that the network guys have turned it on. Is there a way to simply drop traps that have not b; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00090.html (13,061 bytes)
6. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: James Shanks <jshanks AT us.ibm DOT com>; Date: Tue, 24 Oct 2006 10:49:58 -0400; The answer to your first question is yes. In order to make a trap have the category "Log Only", you have to build a trap definition for it in trapd.conf. If you have MIBs which define these traps, th; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00091.html (24,211 bytes)
7. RE: [NV-L] Ruleset Editing Questions (score: 1): Author: "Erdey, Raymond M" <Raymond.M.Erdey AT erac DOT com>; Date: Tue, 24 Oct 2006 10:05:35 -0500; To see if/what events are forward to TEC (1) run serversetup (2) Choose "Configure" (3) Choose "Configure event forwarding to IBM Tivoli Enterprise Console" Hello, The forwardall.rs ruleset is used b; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00092.html (19,839 bytes)
8. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 11:09:18 -0400; Ok maybe someone can explain what I am seeing here. Why am I still getting a 1.3.6.1.4.1.9.1.400 trap forwarded to TEC? 2006/24/10 09:46:38 CorrelationDef.C[562] : Current running correlation: Correl; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00093.html (27,036 bytes)
9. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 11:15:46 -0400; I fixed the leading . on the OID. That was an experiment. Sean Lawrence Systems Automation Ext 5728 James Shanks <jshanks AT us.ibm DOT com> Sent by: nv-l-bounces AT lists.ca.ibm DOT com 10/24/2006 1; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00094.html (22,083 bytes)
10. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 11:48:54 -0400; My config is correct in the rules editor. But the output of nvcdebug -n is different. Looks like the Cisco guys might have solved our flooding problem. I still want to get this working for my own san; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00097.html (29,291 bytes)
11. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: Greg Keetch <gkeetch AT ca.ibm DOT com>; Date: Tue, 24 Oct 2006 09:01:11 -0700; Sean, This may seem like a silly question, but did you remember to do a 'nvtecia -reload' after you updated the Enterprise ID in the ruleset? Sorry, I had meant to ask this last time since it's easy; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00098.html (31,532 bytes)
12. Fw: [NV-L] Ruleset Editing Questions (score: 1): Author: James Shanks <jshanks AT us.ibm DOT com>; Date: Tue, 24 Oct 2006 12:09:52 -0400; I'm resending this because the last one was too large with all the appends in it or so said the list bouncer. == No way. cat your ruleset again. If the nvcorrd.alog trace shows a leading dot, then th; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00101.html (12,853 bytes)
13. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Tue, 24 Oct 2006 12:15:49 -0400; Yes I have been doing that. It looks like we are going a different direction with the solution for this. I will revisit NV rules as I want to learn this. Thanks for everyone's help. Sean Lawrence Sys; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00102.html (30,919 bytes)
14. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: Greg Keetch <gkeetch AT ca.ibm DOT com>; Date: Tue, 24 Oct 2006 08:27:06 -0700; I saw in another response from you that you removed the leading '.' from the enterprise ID in your ruleset... This output shows that it's still there. Has there been any change since you removed it?; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00103.html (29,259 bytes)
15. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: James Shanks <jshanks AT us.ibm DOT com>; Date: Tue, 24 Oct 2006 12:00:45 -0400; No way. cat your ruleset again. If the nvcorrd.alog trace shows a leading dot, then that's what is in the ruleset he loaded. And that's what the nvcorrd trace you posted shows Note that if you change; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00104.html (39,863 bytes)
16. Re: [NV-L] Ruleset Editing Questions (score: 1): Author: sean.lawrence AT cantire DOT com; Date: Wed, 25 Oct 2006 12:59:48 -0400; Well, I got this working. I am not seeing this behaviour. "Note that if you change your TEC ruleset after nvserverd is started, then you must restart him or reload with nvtecia." I was using nvtecia; /usr/local/webapp/mharc-adsm.org/html/nv-l/2006-10/msg00105.html (30,833 bytes)

Current List: 1 - 16
Page: [1]