nv-l

Re: [nv-l] trap acknowledge

2004-11-23 10:18:16
Subject: Re: [nv-l] trap acknowledge
From: James Shanks <jshanks AT us.ibm DOT com>
To: nv-l AT lists.us.ibm DOT com
Date: Tue, 23 Nov 2004 10:17:43 -0500

On UNIX, events can be correlated and resolved -- removed from the event display -- by a ruleset.   There are samples in /usr/OV/conf/rulesets which do just that.  You run that ruleset in an event window rather then the base one, forwardall.rs.  Anyone using the forwardall.rs ruleset will see both events,   If you want to edit an existing ruleset or create a new one, then you can use the graphical editor, nvrsEdit.  All this is discussed in great detail in the NetView for UNIX Admin Guide, Chapter 5.  

On Windows all events are written to the ODBC database when received and the browser displays them from there.  Rulesets can be implemented as custom filters on the event browser display.  There is no graphical editor but there are several samples in \usr\ov\conf\rulesets and if you have the latest level of maintenance for 7.1.3 (FixPack FP03) there is a document , Rulesets_on_Windows.readme in \usr\ov\doc  which explains those samples in detail.  To create a new ruleset for  Windows your best bet would to create it first on UNIX, and then port it to Windows, since it is enormously difficult to make a new ruleset  by edit, though it is relatively easy to edit one that you already understand how it works.

I'd start your project on UNIX first, since it is easier to use and understand, and the ruleset implementation on Windows is derived from UNIX.  
Good luck.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group



Gildas.Plouzennec AT alcatel DOT fr
Sent by: owner-nv-l AT lists.us.ibm DOT com

11/23/2004 09:43 AM
Please respond to
nv-l

To
nv-l AT lists.us.ibm DOT com
cc
Subject
Re: [nv-l] trap acknowledge





Thanks for your reply and your answer.

To complete my question, I am developping a Netview plug-in for Windows
(2K, XP, ...) AND  Unix/Linux, and my base version is R7.1.3 (I have to
check the compliance with 7.1.4).

Gildas PLOUZENNEC

ALCATEL e-SD Professional Services
-------------------------------------------------------
gildas.plouzennec AT alcatel DOT fr                                  +33(0)2 98 14 37 81
professional.services AT alcatel DOT fr                 +33(0)2 98 14 30 40
-------------------------------------------------------





James Shanks wrote:

>
> It would really help when you ask a how-to question if you would
> mention whether you are using NetView for Windows or NetView for UNIX
> and at what level on which operating system.  The answers can be
> platform-specific.  In this case I can give you a generic answer but a
> specific one would require knowing what platform you are working on
> and at what level of NetView exactly.
>
> The short answer to your question is that trap correlation is achieved
> using rulesets.  These are implemented on both UNIX and Windows but
> the implementation is rather different.  It is much more complicated
> to do on Windows because there is no native ruleset editor, whereas on
> UNIX there is a graphical editor you can use to build the ruleset.  
> There is extensive documentation on how to do event correlation in the
> UNIX Administrator's Guide and it is discussed in the Windows User's
> Guide as well.
>
> Hope this helps
>
> James Shanks
> Level 3 Support  for Tivoli NetView for UNIX and Windows
> Tivoli Software / IBM Software Group
>
>
> *Gildas.Plouzennec AT alcatel DOT fr*
> Sent by: owner-nv-l AT lists.us.ibm DOT com
>
> 11/23/2004 05:25 AM
> Please respond to
> nv-l
>
>
>                  
> To
>                  nv-l AT lists.us.ibm DOT com
> cc
>                  
> Subject
>                  [nv-l] trap aknowledge
>
>
>
>                  
>
>
>
>
>
> Hi all,
>
> I have a question about trap handling.
> How can i manage the trap "correlation" ?
> Example : I receive a trap "alarm 10 up", and 10 minutes later, I
> receive a trap "alarm 10 down".
> In the event browser, is it a possibility to aknowledge the "alarm 10
> up", or to remove it ?
>
> Thank you all,
>
> --
> Gildas PLOUZENNEC
>
> ALCATEL e-SD Professional Services
> -------------------------------------------------------
> gildas.plouzennec AT alcatel DOT fr                                  
>
>
>
>

<Prev in Thread] Current Thread [Next in Thread>