Bill -
First, please get in the habit of putting a subject in your postings so that
others can follow the thread.
Second, if what you see in the workspace matches what you get in TEC, then the
ruleset is doing what it should do. The way you test a ruleset is in a
workspace. Don't expect it to work differently when you use it for TEC. But
read on -- there are some things you can do in a workspace you cannot do with
TEC forwarding.
Third, use the ruleset editor (nvrsEdit) to open that ruleset and click in the
initial event stream ( the "purple pizza"). Does it say that the default action
is BLOCK or PASS? If PASS, then that is why you see little difference between
it and forwardall.rs. If not, and it says BLOCK, then I don't know what is
wrong in your set up.
Fourth, the ruleset that I have called sampcorrNuNd.rs does a Resolve. If the
Node Up hostname matches the Node Down hostname and the Node Up came within 10
minutes of the Node Down, then a "resolve" for this event is sent to nvevents,
and it will pull that Node Down from all event windows. But you cannot do this
with TEC. It will not know what to do with a "resolve" request designed for
nvevents and will ignore it. To remove an event from a TEC console you must get
it in closed status in TEC; something you have to do with a TEC rule, not a
NetView one. Of course, you could write a different rule, one which might use
wpostemsg to send a different event to TEC, or one with different logic, which
would only send a Node Down to TEC if the matching Node Up did not come in. But
by itself, the sampcorrNuNd.rs rule is not a good one to use for TEC forwarding.
Fifth, in all of this you haven't said what level of NetView you are using here.
Mine is 5.1.1, of course, and I have no script errors trying to run nvtecia.
Are you root? What error did you get?
Hope this helps.
James Shanks
Tivoli (NetView for UNIX) L3 Support
"McCarter, Bill" <mccarter_we@NNS.COM> on 08/24/99 08:16:37 AM
Please respond to Discussion of IBM NetView and POLYCENTER Manager on NetView
<NV-L@UCSBVM.UCSB.EDU>
To: NV-L@UCSBVM.UCSB.EDU
cc: (bcc: James Shanks/Tivoli Systems)
Subject:
I'm having trouble getting events filtered using the sample Node up Node
down rule supplied with Netview and forwarded to TEC. I'm still seeing all
of my events at my Tec server when I do a wtdumprl. When I create a dynamic
workspace and try the rule I still see all my events in the workspace. I'm
configuring the event forwarding through the gui on my Tivoli desktop. When
I change what rule to use , it changes the tecint.conf file on my netview
server. I can't seem to get the nvtecia -reload command to work it errors
out like the script is wrong. Any ideas?
Thank You
Bill
Bill McCarter
Enterprise Systems Management
Newport News Shipbuilding, Dept. OO5
Phone (757) 688-2602
Email mccarter_we@nnscom
|