nv-l

Re: [nv-l] MLM events in TEC - state correlation

2004-08-05 16:05:56
Subject: Re: [nv-l] MLM events in TEC - state correlation
From: wolfgang.bergbauer AT attglobal DOT net
To: nv-l AT lists.us.ibm DOT com
Date: Thu, 5 Aug 2004 21:48:25 +0200

Hi James,

I had a parsing error in state correlation engine, I think it was a problem with the formatting of the trap when using snmptrap. Trapd processed the event without issues, but the state correlation engine did not, so it never made it to TEC.
Now one question in regards to the State Correlation. I spend almost the whole day getting a simple reset on match rule to work, without success.
Does anybody know if the function defined within the default rules, just stop further rule processing for TEC_ITS_NODE_STATUS events.
The idea I had was to use the state correlation for delaying Node Status and Router status events for 5 minutes. In the past we used the Ruleset editor, which I really hate because we have quite a big ruleset and it is a nightmare to maintain this rule. (You have to docment seperately what is under the icons).

Thanks for your information and kind regards,

        Wolfgang


------------------------------------------------------------------
Wolfgang Bergbauer
Network and System Management Consultant
Cell phone: +49 172 534 9131
E-mail: wolfgang.bergbauer AT attglobal DOT net



James Shanks <jshanks AT us.ibm DOT com>
Sent by: owner-nv-l AT lists.us.ibm DOT com

04.08.2004 20:39
Please respond to
nv-l AT lists.us.ibm DOT com

To
nv-l AT lists.us.ibm DOT com
cc
Subject
Re: [nv-l] MLM events in TEC






All events sent by nvserverd go as TEC_ITS_BASE unless you define another default event class in tecint.conf or specifically define an event class in trapd.conf.  TEC_ITSBASE replaces the old Nvseverd_Event class as the default class.  By the way, the only way you would see events you don't expect over in TEC is if you were using some ruleset other than TEC_ITS.rs or if you modified it.  


trapd.conf entries ignored?  You'd have to prove that to me.  Having worked on this code for 7 years, I'm willing to bet that's not true.

So what are you expecting that you don't see?  



James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group


wolfgang.bergbauer AT attglobal DOT net
Sent by: owner-nv-l AT lists.us.ibm DOT com

08/04/2004 02:09 PM
Please respond to
nv-l

To
nv-l AT lists.us.ibm DOT com
cc
Subject
[nv-l] MLM events in TEC








Hi all,


After migrating Netview 6.0.3 to Netview 7.1.4 FP01 we see problems with our MLM events.
All the MLM events are coming into TEC as TEC_ITS_BASE, with some variables that identify it as MLM/Threshold events, with a generic and specific trapd ID


Now 2 issues here:


1. When I look into trapd.conf, there is no TEC Event defined for MLM/Threshold events. How can it go to TEC then as TEC_ITS_BASE.

2. For all our  MLM ARM/ReARM events I have specific entries in the trapd.conf with OID of Tivoli/MLM_Threshold {1.3.6.1.4.1.2.6.12.5.1} and a unique specific trap ID.

This definition seems to be completely ignored.


Thanks for your help.


Kind regards,


      Wolfgang

------------------------------------------------------------------
Wolfgang Bergbauer
Network and System Management Consultant
Cell phone: +49 172 534 9131
E-mail: wolfgang.bergbauer AT attglobal DOT net

<Prev in Thread] Current Thread [Next in Thread>