Event History has nothing to do with trapd.log. It reads what is in
/usr/OV/log/ovevent.log. The biggest size this can be is 2MB, ad when this
is reached, old events are replaced with newer ones.
I would try it by starting it without any filters and then apply them.
I'll bet the evens you want are not in ovevent.log any longer. Events
History should have been called "Recent Events History" because in most
busy shops it will not hold even a day's worth of old events. The
purpose was just to show an operator what he might hav missed from the
previous shift. It was not designed to go back any farther. Historical
analysis has to be done on trapd.log, which you can archive and browse as
you see fit.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
Stephen Elliott <selliott@epicrealm.com> on 10/09/2000 12:08:22 PM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
To: "'nv-l@tkg.com'" <nv-l@tkg.com>
cc: (bcc: James Shanks/Tivoli Systems)
Subject: [NV-L] Event History
All,
I'm having a great time trying to get Event History to work with a filter
specific to certain address ranges. When activated and a query made,
nothing
shows up in the workspace. If I change the Object Identification field to
pass events from all objects, I still get nothing. I've specified a period
of the last 2 days and I've confirmed that there are valid target events in
trapd.log for this timeframe. I've included the filter rules below. If
anyone can spot an error, please let me know.
For all events:
PRESENT=SNMP_TRAP && (LOGGED_TIME>=07:10:00:00:00:00) &&
(LOGGED_TIME<=09:10:00:15:37:00)
For events from specific nodes in 2 address ranges:
PRESENT=SNMP_TRAP && ((IP_ADDR=10.24.0.*) || (IP_ADDR=63.*.*.*)) &&
(LOGGED_TIME>=07:10:00:00:00:00)
&& (LOGGED_TIME<=09:10:00:15:37:00)
Are there known bugs regarding Event History that might account for this
problem?
Regards,
Steve Elliott
Sr. Network Mgmt. Engineer
epicRealm, Inc.
214-570-4560
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|