nv-l

Re: [NV-L] Correlation Daemon Rules

2006-07-17 10:18:31
Subject: Re: [NV-L] Correlation Daemon Rules
From: James Shanks <jshanks AT us.ibm DOT com>
To: Tivoli NetView Discussions <nv-l AT lists.ca.ibm DOT com>
Date: Mon, 17 Jul 2006 10:05:41 -0400
Well, I don't recommend rulesets on Windows, because there are so many
"gotchas" to look out for.
But basically, yes, if you use Wordpad to edit the ruleset (using Notepad
will add unseen characters to the end of the file which will cause nvcord
to fail) then you can do it.

It's even easier in this case than you suppose, because only the initial
instance of the specific id needs to be changes.  The part of the ruleset
which has nv6000 in quotes is actually for the UNIX GUI-based editor.

 RuleSet1 RuleSet TrapID2 TrapID4
"" 0
TrapID2 TrapID AttrDelay3
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916971 " 0 "netView6000
1.3.6.1.4.1.2.6.3" "IBM_NVNDWN_EV           Specific 58916865      " "" 0
AttrDelay3 AttrDelay
"" 0 "" 600 "hold incoming event for ten minutes if no match on attribute
2. See \usr\ov\doc\Rulesets_on_Windows.readme" 0 0 0 "2 2 0~"
TrapID4 TrapID AttrDelay3.2
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916973 " 0 "netView6000
1.3.6.1.4.1.2.6.3" "IBM_NVNUP_EV            Specific 58916864      " "" 0


Any changes more complicated than this however, should be left to the UNIX
editor, nvrsEdit.  I recommend that either you install NetView on a Linux
distribution somewhere (you don't have to actaully use it or deploy it, you
just need to be able to start  nvsecd to use the editor) or else call
Support and ask them to modify the rule for you.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group


                                                                           
             "Claire Bajelis"                                              
             <Claire.Bajelis@b                                             
             endigobank.com.au                                          To 
             >                         "Tivoli NetView Discussions"        
             Sent by:                  <nv-l AT lists.ca.ibm DOT com>           
  
             nv-l-bounces@list                                          cc 
             s.ca.ibm.com                                                  
                                                                   Subject 
                                       [NV-L] Correlation Daemon Rules     
             07/17/2006 12:57                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
              Tivoli NetView                                               
                Discussions                                                
             <nv-l AT lists.ca DOT ib                                           
  
                  m.com>                                                   
                                                                           
                                                                           




Greetings All,


NV 7.1.4 FP4 on Windows 2003


Has anyone successfully adapted the downandnotupinten ruleset to use router
status instead of node status?


I'd like to alter the rule as per below:


RuleSet1 RuleSet TrapID2 TrapID4
"" 0
TrapID2 TrapID AttrDelay3
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916971 " 0 "netView6000
1.3.6.1.4.1.2.6.3" "ROUTDOWN_EV   Specific 58916971      " "" 0


AttrDelay3 AttrDelay
"" 0 "" 600 "hold incoming event for ten minutes if no match on attribute
2. See \usr\ov\doc\Rulesets_on_Windows.readme" 0 0 0 "2 2 0~"


TrapID4 TrapID AttrDelay3.2
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916973 " 0 "netView6000
1.3.6.1.4.1.2.6.3" "ROUTERUP_EV   Specific 58916973      " "" 0


Can anyone confirm if the valid router substitutions for IBM_NVNDWN_EV and
IBM_NVNUP_EV are ROUTDOWN_EV and ROUTERUP_EV ?


Or is messing around with the rulesets on Windows instances just not
recommended?


Thanks in advance for any feedback,
Claire Bajelis




**********************************************************************
This communication is intended only for use of the addressee and may
contain legally privileged and confidential information. If you are
not the addressee or intended recipient, you are notified that any
dissemination, copying or use of any of the information is
unauthorised. The legal privilege and confidentiality attached to
this e-mail is not waived, lost or destroyed by reason of a mistaken
delivery to you. If you have received this message in error, we would
appreciate immediate notification by e-mail at
oncall AT bendigobank.com DOT au or by phoning 1300 366 666 and ask that the
message be permanently deleted from your system.

Bendigo Bank
**********************************************************************
_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to
internal IBM'ers only)




_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)

<Prev in Thread] Current Thread [Next in Thread>