Hi Garry, list,
from the information provided, I would use the >T< placeholder instead of >Z<.
This is because I guess the values 1,3 ,.. from your special-table are just
integer values passed from the trap.
example (as this is derived from a mib variables enumeration, all strings
should start with a small letter):
$SPECROOT/custom/CsEvFormat/EventTables/special-table
0x00000001 string1
0x00000003 txRx_Slot2_18593
0x0000001b aitutaki
0x0000001c mangala
0x0000001d atiu
0x0000001e yep
0x0000001f pukapuka
0x00000020 penrhyn
0x00000021 manihiki
0x0000003d tx/Rx_Slot9_18598
0x00000042 stdy_Slot 10
EventMessage file:
"Latency measurement has exceeded upper limit"
trap-level = {T trap-level 1}
trap-str = {S 2}
trap-rem-id = {I 3}
traps-rem-id-names = {T special-table 3}
trap-sn-id = {I 4}
(event [{e}])
Mit freundlichen Gruessen - Yours sincerely
Raphael Franck
Senior System Engineer
Infrastructure Services & Support
Computacenter AG & Co oHG
Services & Solutions
Europaring 34-40, 50170 Kerpen, Germany
Tel.: +49 2273 597 7842
Mobile: +49 173 6806997
Short-Dial: 77842
E-Mail: [email protected]
WWW: www.computacenter.de
Von: Garry Harst [mailto:[email protected]]
Gesendet: Dienstag, 25. Januar 2011 02:28
An: spectrum
Betreff: [spectrum] Use of EventTables to add trap information into events
Hi
I am have an issue pulling information in from a trap into events as they
appear in Spectrum
It relates to an imported set of traps that I have pulled in using MIB Tools
This process has worked successfully - example of the custom alert map entry
as shown
# latency trap-level
1.3.6.1.4.1.13732.99.1.6.8 0xfff0500a 1.3.6.1.4.1.13732.99.99(1,0)\
# trap-str
1.3.6.1.4.1.13732.99.98(2,0)\
# trap-rem-id
1.3.6.1.4.1.13732.99.97(3,0)\
# trap-sn-id
1.3.6.1.4.1.13732.99.96(4,0)
I've then created an escalation model based on the trap level which works just
fine, it includes a clear to clear an existing alert
0xfff0500a R Aprisma.EventCondition, "{VARDATA 1} == { I 0 }", "0xfff05085
-:-", "{VARDATA 1} == { I 1 }", "0xfff05085 -:-", "{VARDATA 1} == { I 2 }",
"0xfff05086 -:-", "default", "0xfff05087"
0xfff05085 E 30 A 2, 0xfff0500a,3, U
0xfff05086 E 30 C 0xfff0500a,3 C 0xfff05085,3
0xfff05087 E 30
The issue I am having is relating to using one of the variables in the trap to
call a string - this is
1.3.6.1.4.1.13732.99.97(3,0)\
In the event message I have the following lines
"Latency measurement has exceeded upper limit"
trap-level = {T trap-level 1}
trap-str = {S 2}
trap-rem-id = {I 3}
traps-rem-id-names = {Z special-table 3}
trap-sn-id = {I 4}
(event [{e}])
I am attempting to use the trap-rem-id value to call a value from an eventable
called special-table - contents as shown
1 string1
3 TxRx_Slot2_18593
27 Aitutaki
28 Mangala
29 Atiu
30 yep
31 Pukapuka
32 Penrhyn
33 Manihiki
61 Tx/Rx_Slot9_18598
66 Stdy_Slot 10
. --To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
-----------------------------------
Computacenter AG & Co. oHG, mit Sitz in Kerpen (Amtsgericht Köln HRA 18096)
Vertretungsberechtigte Gesellschafter:
Computacenter Aktiengesellschaft, mit Sitz in Köln (Amtsgericht Köln HRB 28384)
Vorstand: Oliver Tuszik (Vorsitzender), Dr. Karsten Freihube, Hans-Georg
Freitag, Frank Kottmann, Reiner Louis
Aufsichtsrat: Michael Norris (Vorsitzender)
Computacenter Management GmbH, mit Sitz in Köln (Amtsgericht Köln HRB 28284)
Geschäftsführer: Ulrich Irnich
Visit us on the Internet: http://www.computacenter.de
Visit our Online-Shop: https://shop.computacenter.de
This email is confidential. If you are not the intended recipient, you must not
disclose or use the information contained in it. If you have received this mail
in error, please tell us immediately by return email and delete the document.
-----------------------------------
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
