nv-l

Re: [nv-l] need info on trapd.log

2005-09-20 11:46:38
Subject: Re: [nv-l] need info on trapd.log
From: James Shanks <jshanks AT us.ibm DOT com>
To: nv-l AT lists.us.ibm DOT com
Date: Tue, 20 Sep 2005 11:46:07 -0400
My mistake.  I don't know what I was thinking.
trapd.log does contain these same fields on every line
<Receipt time (in epoch time format)> <trap category> < Receipt time
(locally formatted with month, day, year, hours, minutes, and seconds)>
<trap source character>
If the trap formatting you specify extends over multiple lines, then each
line will have these fields at the beginning, and there is no way around
that.

Sorry for the misinformation.


James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group


                                                                           
             James                                                         
             Shanks/Raleigh/IB                                             
             [email protected]                                                    To 
             Sent by:                  nv-l AT lists.us.ibm DOT com             
  
             [email protected]                                          cc 
             us.ibm.com                                                    
                                                                   Subject 
                                       Re: [nv-l] need info on trapd.log   
             09/20/2005 11:03                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
                   nv-l                                                    
                                                                           
                                                                           




My advice is to review your options in the trapd.conf man page.

Basically you can make the trap format say almost anything, but then you
have to configure it yourself.  If you don't like the way $* formats things
then you'll have to use something else.  Once you know how many variables
are sent in the trap, either from the MIB definition or from a prior one in
trapd.log, then you could just  make it say
      $E $G $S  $1 $2 $3  . . .
and so on up to the number of variables, for example.  And you can insert
text of your own in between the variables.  You can also decide for
yourself how many lines it should be on.  If your format contains a newline
\n then it will be split in trapd.log, but the subsequent lines  will also
show the timestamp and the hostname, just like every other line in the log.
Note that trapd.log does not  prepend each line with  trap category nor
creation time, only with the timestamps indicating when trapd received the
trap and the hostname of origin.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group



             Swapna Prasad
             <[email protected]
             ahoo.com>                                                  To
             Sent by:                  nv-l AT lists.us.ibm DOT com
             [email protected]                                          cc
             us.ibm.com
                                                                   Subject
                                       [nv-l] need info on trapd.log
             09/20/2005 10:08
             AM


             Please respond to
                   nv-l







Hi All,

         Using NetView 7.1.4 on Solaris
         Configured the traps, and I have set the "event log description"
to log all the varbinds of the trap, by specifying $*. In the trapd.log
file each of the varbinds are on separate line and each line is prepended
with other info such as epoch time, trap category,trap creation time,....
Is there a way I can have all the varbinds under one trap description in
the trapd.log.

Thanks







<Prev in Thread] Current Thread [Next in Thread>