I am trying to implement event correlation in TEC for the HSRP deleted and
HSRP added traps. I would like to send the IP address from the trap to TEC
as a separate slot variable. A recent posting provided a good solution for
parsing the trap. I have tried putting this command in an Inline Action
node in the ruleset:
export NVATTR_6=`set -A ATTR $NVATTR_3; print ${ATTR[2]}`
I know that the parsing is working properly because I put a similar command
in an Action node, and logged it to a file. I am getting the IP address
extracted from the trap variable #3. I think that my problem might be
trying to set the value of the new variable, $NVATTR_6. Do I have to do
anything special with the slot mappings in the event configuration for the
IBM_NVHSRPADD_EV event? Trap variables 1-5 are already being passed by the
event adapter to TEC without any slot mappings defined, so I did not think
that this would be needed.
Has anyone tried something like this before with rulesets and TEC, and have
some suggestions? If anyone has a different approach to solving the event
correlation issue, I'd be interested in that, too.
THANKS!
Joel Gerber - I/T Networking Professional - USAA Information Technology Co.
- San Antonio, TX
"I love deadlines. I especially love the swooshing sound they make as they
go flying by."
Dilbert's Words of Wisdom
|