Are you asking why there are event categories other than "Log Only" and 
"Don't Log or Display"?
They are there so that you can categorize events and have different 
workspaces show different subsets of events, for whatever operational 
purposes you might want.  And since you can also access categories in 
rulesets, they allow actions based on that grouping too.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
 





"Treptow, Craig" <Treptow.Craig AT principal DOT com>
04/05/2002 09:35 AM

 
        To:     "NetView List (E-mail)" <nv-l AT lists.tivoli DOT com>
        cc:     "'Dermott'" <dermottA AT attbi DOT com>
        Subject:        RE: [nv-l] Configuring events to log to another log 
file?

 

Thanks.  I understand what you're saying.  I was just hoping for something 
slightly cleaner. 

So does anybody know the point to these categories?  "Log Only", and 
"Don't Log or Display", are the only two that seem to make a difference.

-----Original Message-----
From: Dermott [mailto:dermottA AT attbi DOT com]
Sent: Thursday, April 04, 2002 1:20 PM
To: Treptow, Craig; NetView List (E-mail)
Subject: Re: [nv-l] Configuring events to log to another log file?


Hey Craig,

Auth Failures are vendor specific.
Cisco, Microsoft & Xylan, for instance,  send them under their own OID.
For example, for cisco I coded the auth failure trap to also show the 
cause (authAddr):
(Most other vendors dont fill in this field).

Cisco_Auth_Failure {1.3.6.1.4.1.9} 4 0 A 2 0 "Status Events"
Cisco Incorrect Community Name (authenticationFailure Trap) authAddr: $1.

You could also populate the "Command for Automatic Actions" field to
write these to a separate file or send an email to a service account .....

Good Luck,
--Dermott

----- Original Message -----
From: "Treptow, Craig" <Treptow.Craig AT principal DOT com>
To: "NetView List (E-mail)" <nv-l AT lists.tivoli DOT com>
Sent: Thursday, April 04, 2002 1:42 PM
Subject: [nv-l] Configuring events to log to another log file?


> Netview 6.0.2 AIX 4.3
>
> I would like to take all the authentication error traps and log them to 
their own file rather than trapd.log.
> It looks like either modifying the "AuthenticationFailures" event 
category, or creating a new category could work.  Does anybody
know if this is possible, or where it is mentioned?  I'm having trouble 
find a good discussion of this in the manuals.
>
> Thanks.
>
>
> Craig
>
> A dozen, a gross, and a score,
> Plus three times the square root of four,
> Divided by seven,
> Plus five times eleven,
> Equals nine squared plus zero, no more.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
> For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com
>
> *NOTE*
> This is not an Offical Tivoli Support forum. If you need immediate
> assistance from Tivoli please call the IBM Tivoli Software Group
> help line at 1-800-TIVOLI8(848-6548)
>

---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe AT lists.tivoli DOT com
For additional commands, e-mail: nv-l-help AT lists.tivoli DOT com

*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)