nv-l

Re: Parsing msg string (Netview event) into TEC event.

1999-03-26 09:57:01
Subject: Re: Parsing msg string (Netview event) into TEC event.
From: "Mull, John" <jmull AT HERSHEYS DOT COM>
To: nv-l AT lists.tivoli DOT com
Date: Fri, 26 Mar 1999 09:57:01 -0500
Hi dug,

Thanks for the tip..  Tried it... but no success.  Now the event doesn't
even hit the TEC reception log.  Couple of questions.
What version of Netview and TEC are you running???  We are still at V4.1.2
for Netview and TME Framework V3.2, TEC V3.1

I suspect either I got a buggy tecad_nv6k, or I need the mib value for the
"trapDesc1" for the tecad_nv6k.oid file?

I had successfully parsed a description text for APC Ups events using a mib
for the description field.  I added the mib to the
oid file, then mapped it on the .cds file like your example.. Worked like a
champ.

Guess this is where I am stuck...........

> ----------
> From:         Doug Horn[SMTP:Doug_Horn AT HSBC DOT CA]
> Sent:         Thursday, March 25, 1999 4:52 PM
> Subject:      Re: Parsing msg string (Netview event) into TEC event.
>
> Hi Jon
>
>
> This is what our CDS file looks like and it works great:
>
>
> CLASS CPU_Util
>   SELECT
>     1: ATTR(=,$ENTERPRISE), VALUE(PREFIX, "1.3.6.1.4.1.2.6.71") ;
>     2: $SPECIFIC = 1 ;
>     3: ATTR(=, "trapDesc1"), VALUE (CONTAINS, "CPU Utilization") ;
>     4: ATTR(=, "trapSystemName") ;
>   MAP
>     msg = $V3;
>     hostname = $V4;
> END
>
>
> Hope this helps
> dug
>
>
> Hi,
>
> Trying to parse a message string from customized event using
> /usr/OV/bin/snmptrap into TEC.  The customized event
> hits trapd.log perfectly, and tecad_nv6k reads the event, but does not
> format the message string into the TEC slot value.
>
> I tried to format the tecad_nv6k.cds to map this string, but have been
> unsuccessful in all attempts.
>
> Here is the Netview event in trapd.log:
>
> 922395437  7  Thu Mar 25 15:57:17 1999 nv6000.hersheys.com       u  [1]
> mgmt.mib
> -2.system.sysDescr.0 (OctetString): HFC_errptS SRC            SOFTWARE
> PROGRAM ERROR
>
> Here is the Tivoli event:
> HFC_errpt;
>         server_handle=1;
>         date_reception=922395437;
>         event_handle=1;
>         source=NV6K;
>         sub_source=NET;
>         origin=;
>         sub_origin='';
>         hostname=nv6000.hersheys.com;
>         adapter_host=;
>         status=OPEN;
>         administrator='';
>         acl=[ admin];
>         severity=WARNING;
>         date='Mar 25, 1999 15:57';
>         duration=0;
>         msg=";
>         msg_catalog='';
>         msg_index=0;
>         num_actions=0;
>         credibility=0;
>         repeat_count=0;
>         cause_date_reception=0;
>         cause_event_handle=0;
>         category=Agent;
> END
>
> Here is the tecad_nv6k.cds:
>
> CLASS HFC_errpt
>    SELECT
>     1:  ATTR(=,$ENTERPRISE) , VALUE(PREFIX, "1.3.6.1.2.1.0" ) ;
>     2:  $SPECIFIC = 2 ;
>    FETCH
>         1: IPNAME($SOURCE_ADDR) ;
>    MAP
>      hostname = $F1 ;
> END
>
> Does anyone know the correct Select statement to map this value for the
> msg
> slot value?
>
> Thanks for any help anyone can offer.
> John Mull
> Hershey Foods Corporation
> Information Technology & Integration
> Enterprise Systems Management
> (717)534-7959
> email:jmull AT hersheys DOT com
>
> Any comments or statements made are not
> necessarily those of Hershey Foods Corporation
>

<Prev in Thread] Current Thread [Next in Thread>