Environment is Netview/AIX 5.1.1
My question: Is anyone using NetView/AIX rules and correlation to process
network event and traps, and subsequently forwarding specific traps to
CA-Unicenter?
We use Netview to monitor the network, and use CA-Unicenter as our focal
point for enterprise events. Unicenter is to correlate events from Netview,
BMC Patrol, and other platform managers and does the paging, sends e-mail,
and opens problem tickets. To Initially get started using Unicenter
sending out network event pages, we set up the trapd configuration option in
Netview to forward specific traps to our Unicenter host. Then in NetView,
Options--> Event Configuration-->Trap Customization: SNMP... we configured
specific traps/events for be forwarded. We forwarded events like NetView
interface up/down and some selected Cisco traps. Now we want to get more
sophisticated in our process, and establish some rules and correlation in
NetView so we can forward one event to Unicenter rather than multiple, or
don't forward any event if a device responds on the next Netview poll cycle.
>From my reading and experimenting, forward traps the way we currently do, it
looks like the trap gets forwarded before nvcorrd rules are invoked. Thus
we have no way to apply rules or correlation before the event is forwarded
to Unicenter. Plus we would like to modify events to tell Unicenter the
severity level of the problem, so it can either page or just send an e-mail
to support. We are now looking at alternate ways to accomplish this. Any
suggestions?
Thanks,
Gib Fendrick
|