You should be able to do this by just using the Trap Settings node and not
specifying a specific id.  Or you can use Event Attributes and select
Enterprise Id.  I cannot recall the last time, but I believe I have seen
others do this both ways.

James Shanks
Tivoli (NetView for UNIX) L3 Support



"jcbrown.net" <jcbrown AT jcbrown DOT net> on 11/02/98 08:19:57 PM

Please respond to jcbrown AT pobox DOT com

To:   NV-L AT UCSBVM.UCSB DOT EDU
cc:    (bcc: James Shanks)
Subject:  Ruleset question





There are umpteen million traps a Bay router will send the NMS. We can
control what severity of event it sends on the router side... That limits
the traps we want to see to about 1500 that shouldn't occur that often.

I have a ruleset that blocks traps by default and then only allows
specified
traps through.
This cuts down on the number of useless traps going to our event window.

Is there a way that I can punch a hole in my ruleset by enterprise and
ignore the specific ID. I know that I could turn around a query the device
when a trap comes in and say if it is a router pass the event, but that is
way too much overhead everytime a trap comes in.
Any suggestions?

Thanks,
Cindy Brown