I'm interested too. I've not been able to get omnibus doc so would be
great if someone could provide doc on what is needed. We (Velocity
Software/ESALPS/zVPS) provide a lot of data and a lot of alerts.
Sending alerts somewhere that does not acknowledge doesn't do anyone any
good, and we are probably the best to provide "snmp trap prob rule"s.
So, if somebody can help, it is time we (Velocity) provide assistance in
this area....
Martin, Terry R. (CMS/CTR) (CTR) wrote:
Hi
I am trying to send an ALERT captured in Velocity ESAMON over to our
NETCOOL/OMNIBUS console. I have the Velocity piece set up and we can see
that the ALERT gets to the OMNIBUS console. See logs below. However
nothing is being done with it because the OMNIBUS guy tells me that
there needs to be a SNMP TRAP PROBE RULE defined. This is where it gets
a little foggy for me.
What should this rule look like on the OMNIBUS side to pick up my ALERT
and have an email sent out based on the alert?
I am also a little confused between a MIB and an OID in some of the
documentation I read they seem to be used interchangeable.
Anyway here is the SNMP TRAPDEST file that is defined in ESATCP:
* THIS FILE IS THE LIST OF SNMP TRAP DESTINATIONS
* FORMAT IS IP ADDRESS, COMMUNITY NAME, AND OPT OID
158.xx.xxx.xxx velocity 2B0601020102020102
Here is the log from the OMNIBUS console. I added ‘X’s to the IP address
for privacy sake.:
10/15/09 14:37:12: Debug: 1 trap in queue
10/15/09 14:37:12: Debug: V1 trap received
10/15/09 14:37:12: Information: Number of items in the trap queue is 0
10/15/09 14:37:14: Debug: 158.xx.xxx.226: gethostbyaddr: h_errno = 1
10/15/09 14:37:21: Debug: 158.xx.xxx.226: gethostbyaddr: h_errno = 1
10/15/09 14:37:21: Debug: [Event Processor] ReqId: 0
10/15/09 14:37:21: Debug: [Event Processor] enterprise: .1.3.6.1.4.1.15601
10/15/09 14:37:21: Debug: [Event Processor] generic-trap: 6
10/15/09 14:37:21: Debug: [Event Processor] specific-trap: 0
10/15/09 14:37:21: Debug: [Event Processor] UpTime: 845
10/15/09 14:37:21: Debug: [Event Processor] Uptime: 0:00:08.45
10/15/09 14:37:21: Debug: [Event Processor] community: velocity
10/15/09 14:37:21: Debug: [Event Processor] IPaddress: 158.xx.xxx.226
10/15/09 14:37:21: Debug: [Event Processor] PeerIPaddress:
158.xx.xxx.226
10/15/09 14:37:21: Debug: [Event Processor] ReceivedPort: 162
10/15/09 14:37:21: Debug: [Event Processor] ReceivedTime: 1255610232
10/15/09 14:37:21: Debug: [Event Processor] Protocol: UDP
10/15/09 14:37:21: Debug: [Event Processor] SNMP_Version: 1
10/15/09 14:37:21: Debug: [Event Processor] OID1: .1.3.6.1.2.1.2.2.1.2
10/15/09 14:37:21: Debug: [Event Processor] 1: PAGE SPACE IS 34.43% USED
10/15/09 14:37:21: Debug: [Event Processor] 1_raw: PAGE SPACE IS
34.43% USED
10/15/09 14:37:21: Debug: [Event Processor] 1_text: PAGE SPACE IS
34.43% USED
10/15/09 14:37:21: Debug: [Event Processor] 1_hex: 50 41 47 45 20
53 50 41 43 45 20 49 53 20 20 33 34 2e 34 33 25 20 55 53 45 44 20
10/15/09 14:37:21: Debug: [Event Processor] .1.3.6.1.2.1.2.2.1.2:
PAGE SPACE IS 34.43% USED
10/15/09 14:37:21: Debug: [Event Processor] Node: 158.xx.xxx.226
10/15/09 14:37:21: Debug: [Event Processor] PeerAddress:
158.xx.xxx.226
10/15/09 14:37:21: Debug: [Event Processor] EventCount: 1355
10/15/09 14:37:21: Debug: [Event Processor] Processing alert {0 remaining}
10/15/09 14:37:21: Debug: <<<<< Entering... snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Entering...
FixMttrapdOids.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Leaving...
FixMttrapdOids.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< (snmptrap.rules) Event is an
enterprise-specific trap. >>>>>
10/15/09 14:37:21: Debug: <<<<< (snmptrap.rules) Enterprise ID not
found, checking ncotdc include files. >>>>>
10/15/09 14:37:21: Debug: <<<<< (snmptrap.rules) Enterprise ID not found
in any include file. >>>>>
10/15/09 14:37:21: Debug: <<<<< Entering...
CorrScore.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: A value for '' doesn't exist in lookup table
'snmptrapCorrScore' - using default
10/15/09 14:37:21: Debug: <<<<< Leaving...
CorrScore.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Entering...
PreClass.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: A value for '' doesn't exist in lookup table
'snmptrapPreClass' - using default
10/15/09 14:37:21: Debug: <<<<< Leaving...
PreClass.include.snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Entering...
omnibus36.include.compat.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< (omnibus36.include.compat.rules)
$OPTION_TypeFieldUsage NOT set to 3.6. >>>>>
10/15/09 14:37:21: Debug: <<<<< Leaving...
omnibus36.include.compat.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Entering...
AdvCorr36.include.compat.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Leaving...
AdvCorr36.include.compat.rules >>>>>
10/15/09 14:37:21: Debug: <<<<< Leaving... snmptrap.rules >>>>>
10/15/09 14:37:21: Debug: Flushing events to object server
10/15/09 14:38:12: Debug: Sent Heartbeat Message
10/15/09 14:38:12: Information: Probewatch: Heartbeat Message
10/15/09 14:38:12: Debug: <<<<< Entering...
CorrScore.include.snmptrap.rules >>>>>
10/15/09 14:38:12: Debug: A value for '' doesn't exist in lookup table
'snmptrapCorrScore' - using default
10/15/09 14:38:12: Debug: <<<<< Leaving...
CorrScore.include.snmptrap.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< Entering...
PreClass.include.snmptrap.rules >>>>>
10/15/09 14:38:12: Debug: A value for '' doesn't exist in lookup table
'snmptrapPreClass' - using default
10/15/09 14:38:12: Debug: <<<<< Leaving...
PreClass.include.snmptrap.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< Entering...
omnibus36.include.compat.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< (omnibus36.include.compat.rules)
$OPTION_TypeFieldUsage NOT set to 3.6. >>>>>
10/15/09 14:38:12: Debug: <<<<< Leaving...
omnibus36.include.compat.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< Entering...
AdvCorr36.include.compat.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< Leaving...
AdvCorr36.include.compat.rules >>>>>
10/15/09 14:38:12: Debug: <<<<< Leaving... snmptrap.rules >>>>>
10/15/09 14:38:12: Debug: Flushing events to object server
10/15/09 14:38:12: Debug: Flushing events to object server
//Thank You,//
//Terry Martin//
//Lockheed Martin - Information Technology//
//z/OS & z/VM Systems - Performance and Tuning//
//Cell - 443 632-4191//
//Work - 410 786-0386//
//terry.mar...@cms.hhs.gov <mailto:terry.mar...@cms.hhs.gov>//
//WFH on Tuesdays and Fridays//
