Gib, one suggestion. Instead of forwarding the native "untested" traps have
your automation generate a seperate "private" trap of your own invention
for failures only and forward this trap to CA. I do something along the same
lines using automatic actions and scripting.
Blaine Owens
Eastman Chemical Company
Phone - (423)-229-3579
Fax - (423)-229-1188
bowens@eastman.com
> -----Original Message-----
> From: Fendrick, Gib (CC-MIS) [SMTP:Gib.Fendrick@CONAGRA.COM]
> Sent: Tuesday, November 30, 1999 6:16 PM
> To: NV-L@UCSBVM.ucsb.edu
> Subject: Forwarding events to CA-Unicenter
>
> Environment is Netview/AIX 5.1.1
>
> My question: Is anyone using NetView/AIX rules and correlation to process
> network event and traps, and subsequently forwarding specific traps to
> CA-Unicenter?
>
> We use Netview to monitor the network, and use CA-Unicenter as our focal
> point for enterprise events. Unicenter is to correlate events from
> Netview,
> BMC Patrol, and other platform managers and does the paging, sends e-mail,
> and opens problem tickets. To Initially get started using Unicenter
> sending out network event pages, we set up the trapd configuration option
> in
> Netview to forward specific traps to our Unicenter host. Then in NetView,
> Options--> Event Configuration-->Trap Customization: SNMP... we
> configured
> specific traps/events for be forwarded. We forwarded events like NetView
> interface up/down and some selected Cisco traps. Now we want to get more
> sophisticated in our process, and establish some rules and correlation in
> NetView so we can forward one event to Unicenter rather than multiple, or
> don't forward any event if a device responds on the next Netview poll
> cycle.
>
> From my reading and experimenting, forward traps the way we currently do,
> it
> looks like the trap gets forwarded before nvcorrd rules are invoked. Thus
> we have no way to apply rules or correlation before the event is forwarded
> to Unicenter. Plus we would like to modify events to tell Unicenter the
> severity level of the problem, so it can either page or just send an
> e-mail
> to support. We are now looking at alternate ways to accomplish this. Any
> suggestions?
>
> Thanks,
> Gib Fendrick
|