Re: Parsing msg string (Netview event) into TEC event.

[Doug Horn <Doug_Horn@HSBC.CA>]

Hi Jon


This is what our CDS file looks like and it works great:


CLASS CPU_Util
  SELECT
    1: ATTR(=,$ENTERPRISE), VALUE(PREFIX, "1.3.6.1.4.1.2.6.71") ;
    2: $SPECIFIC = 1 ;
    3: ATTR(=, "trapDesc1"), VALUE (CONTAINS, "CPU Utilization") ;
    4: ATTR(=, "trapSystemName") ;
  MAP
    msg = $V3;
    hostname = $V4;
END


Hope this helps
dug


Hi,

Trying to parse a message string from customized event using
/usr/OV/bin/snmptrap into TEC.  The customized event
hits trapd.log perfectly, and tecad_nv6k reads the event, but does not
format the message string into the TEC slot value.

I tried to format the tecad_nv6k.cds to map this string, but have been
unsuccessful in all attempts.

Here is the Netview event in trapd.log:

922395437  7  Thu Mar 25 15:57:17 1999 nv6000.hersheys.com       u  [1]
mgmt.mib
-2.system.sysDescr.0 (OctetString): HFC_errptS SRC            SOFTWARE
PROGRAM ERROR

Here is the Tivoli event:
HFC_errpt;
        server_handle=1;
        date_reception=922395437;
        event_handle=1;
        source=NV6K;
        sub_source=NET;
        origin=;
        sub_origin='';
        hostname=nv6000.hersheys.com;
        adapter_host=;
        status=OPEN;
        administrator='';
        acl=[ admin];
        severity=WARNING;
        date='Mar 25, 1999 15:57';
        duration=0;
        msg=";
        msg_catalog='';
        msg_index=0;
        num_actions=0;
        credibility=0;
        repeat_count=0;
        cause_date_reception=0;
        cause_event_handle=0;
        category=Agent;
END

Here is the tecad_nv6k.cds:

CLASS HFC_errpt
   SELECT
    1:  ATTR(=,$ENTERPRISE) , VALUE(PREFIX, "1.3.6.1.2.1.0" ) ;
    2:  $SPECIFIC = 2 ;
   FETCH
        1: IPNAME($SOURCE_ADDR) ;
   MAP
     hostname = $F1 ;
END

Does anyone know the correct Select statement to map this value for the msg
slot value?

Thanks for any help anyone can offer.
John Mull
Hershey Foods Corporation
Information Technology & Integration
Enterprise Systems Management
(717)534-7959
email:jmull@hersheys.com

Any comments or statements made are not
necessarily those of Hershey Foods Corporation