Someone other than you has spent some time customizing your system and you
will have to investigate what they did.
NetView does not send specific events 1001 and 1187.  Those are being sent
by some other piece of software on your box, perhaps an snmptrap script
kicked off by a ruleset or by an automatic action in another trap.    I am
at a loss to explain at this point the correlation you see between "minor"
severity in NetView and "critical in TEC.  Here's the code slice we use to
do that mapping:

/* ======================================================================

 *

 *  Function Name:           mapSeverity

 *

 *  Functional Description:  converts NV severity to TEC severity

 *

 *=================================================================== */

char* TecConnServer::mapSeverity(int severity)

{

  // transform our severity to the Tivoli equivalent

  switch (severity)

  {

     case CLEARED:
         return "HARMLESS";
         break;

    case INDETERMINATE:
        return "UNKNOWN";
        break;

    case WARNING:
        return "WARNING";
        break;

    case MINOR:
        return "MINOR";
        break;

    case CRITICAL_SEV:
        return "CRITICAL";
        break;

    case MAJOR:
        return "FATAL";
        break;

     default:
         return "UNKNOWN";
         break;
  }
  return "UNKNOWN";  /* make the compiler happier */
}

/* ======================================================================

So perhaps a script somewhere is actually using wpostemsg to send the evnt and 
bypassing trapd all together.



James Shanks
Team Leader, Level 3 Support
 Tivoli NetView for UNIX and NT



Montoya Vincent-O10501 <Vincent.Montoya AT motorola DOT com>@tkg.com on 
02/19/2001
03:53:20 PM

Please respond to IBM NetView Discussion <nv-l AT tkg DOT com>

Sent by:  owner-nv-l AT tkg DOT com


To:   IBM NetView Discussion <nv-l AT tkg DOT com>
cc:
Subject:  [NV-L] Events from NetView to T/EC





AIX Version 4.3
NetView Version 6.0
Seed file with non-snmp and snmp enabled agents. No ranges (wildcards) are
specified.
Mid-Level Management is being implemented.


Problem:

The following event gets forwarded to the T/EC with another events severity
and message. The two events are related and happen approximately at the
same
time.
NetView Trap Customization:
===========
Specific:1001
Generic: 6
Enterprise: Some name 1.0
Source: Agent (A)
severity: warning
===========
The other event:
===========
Specific:1187
Generic: 6
Enterprise: (same as above) 1.0
Source: Agent (A)
severity: minor         #I believe this maps to Critical on the T/EC
=================
T/EC contains slots:

severity = Critical
msg = '#1187 "some string related to 1187"
nv_enterprise=(same as above);
nv_generic=6;
nv_specific=1001
=================
I asked this question as clear as possible at this point. I'm relatively
new
to this technology so I hope I can get some feedback on this so I can drill
down to a more intelligible question.


_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l