Hi Amitay,
I reformatted your evproc so I could understand it clearly (below) but the
syntax must be ok or you would get nothing at all I think.
Have you got an event_disp_err log file configured (via the relevant .vnmrc
param)? Check it for a run-time error at the time the trap arrives.
Assuming that the device does put those values in the trap ok(!)... Are we
sure the vars #125 and #115 exist in the arriving event 0xfff0606 ?
i.e. by testing first with a simple event format text like:
Policy is {S 125}, Type is {S 115}
so you can see they are in the event vars by looking at the event log. It
could be that the trap's AlertMap is not creating those variables in the
first place.
Good luck and do let us know!
Cheers
Dan.
0xfff00606 E 50 P \
"CreateEventWithVariables \
( \
{C CURRENT_MODEL}, \
{H 0xfff0060a}, \
SetEventVariable \
( \
GetEventVariableList({C CURRENT_EVENT}), \
{H 0x00012b4c}, \
Append \
( \
{S \"DDOS ATTACK. Policy Name: \"}, \
Append \
( \
GetEventVariable ({U 125}), \
Append \
( \
{S \". Type: \"}, \
GetEventVariable ({U 115}) \
) \
) \
) \
) \
) \
"
*Dan White*
Senior Consultant
Service Assurance
[image: Devoteam]
*Mob. : *+44 (0)7973 533671
[email protected]
Follow us : [image: Linked In]
<http://www.linkedin.com/company/4160?trk=null> [image: Twitter]
<http://twitter.com/#!/devoteam> [image: Youtube]
<http://www.youtube.com/user/devoteam>
CONNECTING BUSINESS & TECHNOLOGY
On 3 March 2015 at 16:07, Amitay Ben-ishay <[email protected]>
wrote:
> Hi all,
>
> I'm dealing with ALLOT device.
>
> I get an event, the issue is that I would like to manipulate the alarm
> description\title in the following way:
>
> DDOS ATTACK. Policy Name: 1.3.6.1.4.1.15307.1.0.4.1.1.2 Type:
> .1.3.6.1.4.1.15307.1.2.6.1.2 Volume Bytes: .1.3.6.1.4.1.15307.1.2.5.1.13
> Volume Pps: .1.3.6.1.4.1.15307.1.2.5.1.14
>
>
>
> I assume I need to use some event procedure when append function.
>
> Can you please help me with the needed procedure in order to see the final
> title as described?
>
>
>
> As a start I try to do some procedure according to the man pages.
>
> Here is what I did:
>
> 0xfff00606 E 50 P "CreateEventWithVariables ({C CURRENT_MODEL},{H
> 0xfff0060a}, SetEventVariable (GetEventVariableList ({C CURRENT_EVENT}), {H
> 0x00012b4c}, Append ({S \"DDOS ATTACK. Policy Name: \"},
> Append(GetEventVariable ({U 125}), Append({S \". Type: \"},GetEventVariable
> ({U 115}))))))"
>
>
>
> As a result in the title I get: "DDOS ATTACK. Policy Name:"
>
>
>
> Any ideas?
>
>
>
> Thanks in advance and best regards,
>
> Amitay.
>
>
>
> ------------------------------------------------------------
> This message contains information that may be confidential or privileged.
> If you are not the intended recipient, you may not use, copy or disclose
> to anyone any of the information in this message. If you have received
> this message and are not the intended recipient, kindly notify the sender
> and delete this message from your computer.
>
> - --To unsubscribe from spectrum, send email to [email protected] with
> the body: unsubscribe spectrum [email protected]
>
>
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
