Hello Stephen, Actually mapping events in Spectrum using evntwin.exe is pretty much the same as receiving traps from another snmp enabled device.
1.- you will receive a trap from the device modeled in spectrum that is using evntwin.exe 2.- since the event is not yet mapped in spectrum, you will see an "unknown event trap" event in the event tab of your device 3.- you need to create an event in spectrum with the ECEditor (as you usually do) 4.- Since the trap sent from the device, must likely will have "event discriminators" you will use this to play with the alarms you want to create The first two discriminators are (probably) the ip address and name of the device, since this information will be the same all the time, you will need to search in the other discriminators one that is different (or can vary in time) and that can create an alarm condition in spectrum, every time a different one is received For example: Spectrum evaluates the event, then look at the discriminators it has configured in the Alarm, if you configure event 0xfffffff to be looking at discriminator 3, if the event comes every time with the same info in discriminator 3, Spectrum only records the event and no alarm is generated, but, each time this information is different Spectrum will generate an alarm (critical, major or minor depending on how you configure it). You have to be careful which discriminator you use, in order to avoid an excessive alarm creation flow and false positives. Have a look at the ECEditor manual, there it is explained in detail how to play with Event Discriminators to create selective alarms. If you have a test environment, I will recommend you to test it there before. Hope it helps, Regards, Eng. Edgar Parra MCSE, MCSA, MCP, CA's Spectrum Solutions Engineer On Jan 28, 2009 11:52am, Stephen Warne <[email protected]> wrote: > > > > > > > > > > > > > > > Hi List > > Has > anyone out there used evntwin.exe to map windows events to traps and set up > alertmaps in Spectrum for these traps? The windows end of things is very > straightforward. I would be interested to know how you got on mapping the > traps in Spectrum. > > TIA > > Stephen. > > > > > > > > > > > > > > > > > > Networks > First Ltd , (Registered in England > 291 2114) > > Data Protection Act Fair Collection Notice: Your data will be processed by > Networks First Limited at their offices. We will record information relevant > to the provision of IT services to your company, including your name, > business address, telephone number, e-mail address and details of your > requirements. We will use the data to forward to you information on projects > and services we think may be of interest to you. If you do not want to > receive such communications, wish to update your registration or have any > queries concerning this statement, please contact [email protected] > > > > > > > > > > > > > > > --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] > > > > --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
