*       The Event Stream is set to BLOCK.
*       Two Trap Settings: 1-Node Down, 2-Node Up
*       Reset on Match - 2 Equal 2, Delay Time: 15 minutes
*       Two Actions - One generates email, one for paging.

The ruleset itself works for the node down >15 minutes (email and
page are generated).  The only problem is the Event Source doesn't 
limit the devices to the one in the list.  I'll turn on the trace to see 
what happens.  

Thank you.

> -----Original Message-----
> From: James_Shanks AT tivoli DOT com [SMTP:James_Shanks AT tivoli DOT com]
> Sent: Tuesday, May 30, 2000 11:24 AM
> To:   IBM NetView Discussion
> Subject:      Re: [NV-L] Ruleset for specific node down at 15 minutes
> 
> 
> 
> Event Attributes is how you would do it, and it sounds like you are doing
> it
> right. But you still haven't explained the whole ruleset.  What is the
> Event
> Stream (the "purple pizza") set to, BLOCK or PASS?  Should be BLOCK.  What
> happens after the Reset-On-Match?  Should be Forward.
> 
> Or are you using this instead of forwardall.rs so that the Event Stream is
> set
> to "PASS" and the node after the Reset is "Resolve" or "Block"?
> 
> 
> You may want to turn on the nvcorrd trace by issuing "nvcdebug -d all"
> while
> your ruleset is running and look in the nvcorrd.alog and see what happens
> when
> the event comes in.  The trace may be a bit confusing for the novice,
> however,
> since it is not documented.  You will see that every  incoming event is
> marked
> with "  ===> Received a Trap", then continues with "===> Processing Event"
> and
> ends with "===> Finished with the Trap" so you can follow what happens to
> every
> one.
> 
> James Shanks
> Tivoli (NetView for UNIX and NT) L3 Support
> 
> 
> "Evankovich, Debra A" <devanko AT mtpower DOT com> on 05/30/2000 12:54:44 PM
> 
> Please respond to IBM NetView Discussion <nv-l AT tkg DOT com>
> 
> To:   "'nv-l AT tkg DOT com'" <nv-l AT tkg DOT com>
> cc:    (bcc: James Shanks/Tivoli Systems)
> Subject:  [NV-L] Ruleset for specific node down at 15 minutes
> 
> 
> 
> 
> Hi all,
> 
> I'm trying to create a ruleset to detect specific node down >15 minutes
> and
> then generate a page and email.  The problem is that the ruleset picks up
> every 'node down' instead of just the Event Source that is indicated.
> 
> I created an event under Enterprise Name netView6000 for NodeDown15 by
> copying Specific Trap Number 58916865.  I selected a
> node for the Event Source.   I did the same for the NodeUP Specific Trap
> 58916864.
> 
> The ruleset includes the new NodeDown15 and NodeUp Trap Settings for Input
> 1
> and 2 on a Reset on Match.  Reset on
> Match is Attribute 1 (2) operator 'Equal to'  Attibute 2 (2).
> 
> Can someone tell me how to enable the ruleset to look only for the
> specified
> Event Source?
> 
> Thanks!
> 
> Debra
> 
> Debra Evankovich
> Network Analyst
> Montana Power Company
> (406) 497-4510
> devanko AT mtpower DOT com
> 
> 
> 
> 
> _________________________________________________________________________
> NV-L List information and Archives: http://www.tkg.com/nv-l
> 
> 
>