Hello,
It helped a lot.
This was a problem of syntax, perhaps the problem was only the lower case for
the "v" because regexp({ v 5 }, { S \"State:down\" }) intead of regexp ( {V
5}, {S \"down\"} ) is working.
Many thanks,
___________________________________________________________
Jonathan Rousseaux
Operations Support - Network and System Management
Axa Tech NESD
Postal Address:
Bd du Souverain, 25 - B-1170 Bruxelles, Belgium
Int.Post: W04/687
Visitors Address:
Avenue Marcel Thiry, 208 - B-1200 Bruxelles, Belgium
[email protected] <mailto:[email protected]>
Tel. : +32 2 62 29 045 - Fax : +32 2 62 29 110
Please consider the environment before printing this message
________________________________
From: Robinson, Peter A. [mailto:[email protected]]
Sent: mercredi 11 février 2009 13:23
To: ROUSSEAUX Jonathan
Subject: RE: [spectrum] CSS and Event Condition
Jonathan,
Try something like this: (we are run on Linux - not sure if that will affect
this or not)
# determine if trap State: is "down" or "alive"
0x03cc0008 R {5,0} Aprisma.EventCondition, \
"regexp({ v 5 }, { S \"State:alive\" })", "0xffff0000 -:-", \
"regexp({ v 5 }, { S \"State:down\" })", "0xffff0001 -:-", \
"regexp({ v 5 }, { S \"State:suspended\" })", "0xffff0002 -:-", \
"default", "0xffff0003 -:-"
0xffff0000 E 50 A 3, 0xffff0000, U
0xffff0001 E 50 A 3, 0xffff0001, U
0xffff0002 E 50 A 1, 0xffff0002, U
This will alarm for any of the above conditions. You could have 0xffff0000
clear off 0xffff0001 by doing the following
0xffff0000 E 50 C 0xffff0001
Hope this helps you out!
Peter
From: ROUSSEAUX Jonathan [mailto:[email protected]]
Sent: Wednesday, February 11, 2009 7:17 AM
To: spectrum
Subject: [spectrum] CSS and Event Condition
Hello,
I'm trying to have special alerts raised when a service goes down on a CSS.
I've alerts 0x03cc0008 that is raised when a service is alive, suspended or
down.
The Event is:
"The service state changed to for service . Trap received from T01CSS04_new of
type CiscoCSS
apSvcTrapEventText = Service Transition - Service:VRRP-22/92 State:down"
The message format is:
"{d "%w- %d %m-, %Y - %T"} - The service state changed to {I 3} for service {I
1}. Trap received from {m} of type {t}
apSvcTrapEventText = {S 5}
(event [{e}])"
Then I try to generate an event 0xffffffff when I've the word down in it.
For this I used an event condition with the following regular expression:
regexp ( {V 5}, {S \"down\"} )
But this doesn't seem to work.
Do I am missing something?
Thanks in advance,
___________________________________________________________
Jonathan Rousseaux
Operations Support - Network and System Management
Axa Tech NESD
Postal Address:
Bd du Souverain, 25 - B-1170 Bruxelles, Belgium
Int.Post: W04/687
Visitors Address:
Avenue Marcel Thiry, 208 - B-1200 Bruxelles, Belgium
[email protected] <mailto:[email protected]>
Tel. : +32 2 62 29 045 - Fax : +32 2 62 29 110
Please consider the environment before printing this message
-----Disclaimer-----
This message may contain confidential information intended solely for the use
of the named addressee. If you are not
the intended recipient, you should not read, use, disclose or reproduce the
content of this message. If you have
received this message by mistake, please notify the sender immediately. Any
views or opinions presented in this
message are solely those of the author and do not necessarily represent those
of AXA Belgium, AXA Bank Europe,
AXA Tech Belgium GIE - ESV or any other entity of the AXA Group, unless
otherwise stated by the sender and duly
authorized by the said companies.
---------------------
* --To unsubscribe from spectrum, send email to [email protected] with the
body: unsubscribe spectrum [email protected]
________________________________
The information in this message may be proprietary and/or confidential, and
protected from disclosure. If the reader of this message is not the intended
recipient, or an employee or agent responsible for delivering this message to
the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify First Data immediately
by replying to this message and deleting it from your computer.
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]<<image001.jpg>>
