We have TEC rule that does this.
rule: strip:
(
event: _event of_class 'Nvserverd_Event'
where [
hostname: _hostname
],
reception_action:
(
/*
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Call assert strip_vfc which is defined in Tec_Start.rls. This template
strips
the domain suffix from the hostname. This is done to enhance rules
correlation
for later processing.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
*/
strip_vfc(_hostname,_temp),
bo_set_slotval(_event,hostname,_temp),
)
).
Here is the strip_vfc template in Tec_Start.rls
rule: assert_new_template:
(
event: _event of_class 'TEC_Start'
where [],
reception_action:
(
assert((strip_vfc(_hostname,_temp) :-
atompart(_hostname, '.', _start, 1),
_len is _start - 1,
atompart(_hostname,_temp,1,_len)
))
),
).
Sergio Cardona F <scardona@MAIL.VISIONTECH.COM.CO> on 07/22/99 12:51:15 PM
Please respond to Discussion of IBM NetView and POLYCENTER Manager on NetView
<NV-L@UCSBVM.ucsb.edu>
To: NV-L@UCSBVM.ucsb.edu
cc: (bcc: Bob Metzger/VFITS/VF Corporation)
Subject: NetView Hostnames
Hi All:
I have NetView 5.1.1 in AIX 4.3.2, in another machine TEC 3.6.1 in AIX
4.3.2, all the machines use DNS.
I have this problem: I am sending events to TEC but the host name that
NetView send is some different to the TEC format, NetView sends the host
name in small letter and add the domain to the end, but TEC does not
uses this format.
There is any way to change the name format sent to TEC without make a
correlation an script that changes the name and sends another event ?
maybe in the TEC ?
Regards,
Sergio Cardona
|