Event Attributes is how you would do it, and it sounds like you are doing it
right. But you still haven't explained the whole ruleset. What is the Event
Stream (the "purple pizza") set to, BLOCK or PASS? Should be BLOCK. What
happens after the Reset-On-Match? Should be Forward.
Or are you using this instead of forwardall.rs so that the Event Stream is set
to "PASS" and the node after the Reset is "Resolve" or "Block"?
You may want to turn on the nvcorrd trace by issuing "nvcdebug -d all" while
your ruleset is running and look in the nvcorrd.alog and see what happens when
the event comes in. The trace may be a bit confusing for the novice, however,
since it is not documented. You will see that every incoming event is marked
with " ===> Received a Trap", then continues with "===> Processing Event" and
ends with "===> Finished with the Trap" so you can follow what happens to every
one.
James Shanks
Tivoli (NetView for UNIX and NT) L3 Support
"Evankovich, Debra A" <devanko@mtpower.com> on 05/30/2000 12:54:44 PM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
To: "'nv-l@tkg.com'" <nv-l@tkg.com>
cc: (bcc: James Shanks/Tivoli Systems)
Subject: [NV-L] Ruleset for specific node down at 15 minutes
Hi all,
I'm trying to create a ruleset to detect specific node down >15 minutes and
then generate a page and email. The problem is that the ruleset picks up
every 'node down' instead of just the Event Source that is indicated.
I created an event under Enterprise Name netView6000 for NodeDown15 by
copying Specific Trap Number 58916865. I selected a
node for the Event Source. I did the same for the NodeUP Specific Trap
58916864.
The ruleset includes the new NodeDown15 and NodeUp Trap Settings for Input 1
and 2 on a Reset on Match. Reset on
Match is Attribute 1 (2) operator 'Equal to' Attibute 2 (2).
Can someone tell me how to enable the ruleset to look only for the specified
Event Source?
Thanks!
Debra
Debra Evankovich
Network Analyst
Montana Power Company
(406) 497-4510
devanko@mtpower.com
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|