nv-l

Re: [NV-L] Override Severity in Tivoli Enterprise Console

2007-08-21 11:54:06
Subject: Re: [NV-L] Override Severity in Tivoli Enterprise Console
From: Michael D Schleif <mds AT helices DOT org>
To: nv-l AT lists.ca.ibm DOT com
Date: Tue, 21 Aug 2007 10:02:28 -0500
* "Gupta, Narendra" <guptan AT netscout DOT com> [2007:08:20:10:03:21-0400] 
scribed:
> Hi,
> 
> We have our network application that forwards the SNMP alarms to TEC.
> One of the varbind contains the severity(1 or 2 or 3 etc).  How we can
> map that severity to TEC severities in CDS files. Please advice.
> 
> Thanks,
> 
> Narendra Gupta

Following is one (1) example (from tecad_nv6k.cds) that we have been
using for several years.

BEFORE:

CLASS TEC_ITS_FATAL_ERROR
  SELECT
    1: ATTR(=,$ENTERPRISE) , VALUE(PREFIX, "1.3.6.1.4.1.2.6.3" ) ;
    2: $SPECIFIC = 58851330 ;
    3: ATTR(=, "nvObject" ) ;
    4: ATTR(=, "nvEventDescr" ) ;
    5: ATTR(=, "nvApplNbr" ) ;
  FETCH
    1: IPADDR($V3);
  MAP
    origin = $F1 ;
    hostname = $V3 ;
    msg = $V4 ;
    category = $V5 ;
    nvhostname = $ADAPTER_IP ; # Required for ALL TEC_ITS events
END


AFTER:

CLASS TEC_ITS_FATAL_ERROR
    SELECT
        1: ATTR(=,$ENTERPRISE), VALUE(PREFIX, "1.3.6.1.4.1.2.6.3" );
        2: $SPECIFIC = 58851330;
        3: ATTR(=, "nvObject" );
        4: ATTR(=, "nvEventDescr" );
        5: ATTR(=, "nvApplNbr" );
    FETCH
        1: IPADDR($V3);
    MAP
        category    = $V5;
        hostname    = $V3;
        msg         = $V4;
        nvhostname  = $ADAPTER_IP;
        origin      = $F1;
        severity    = CRITICAL;
END


What do you think?

-- 
Best Regards,

mds
mds resource
877.596.8237
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--

Attachment: signature.asc
Description: Digital signature

_______________________________________________
NV-L mailing list
NV-L AT lists.ca.ibm DOT com
Unsubscribe:NV-L-leave AT lists.ca.ibm DOT com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)