Not working how? What are you expecting it to do? You have a complex
ruleset here and perhaps you should break it down into smaller, simpler
test cases to test the logic in each part before putting them all together.
There is a lot more going on in this ruleset than you have described. And
you haven't told us how it is failing.
I see you thresholding on Cisco LinkUp and LinkDown traps, and sending the
first one for each sending host within a 10-minute window to your
Pass-On-Match. Does this work? Looks like it should. Now what do you
want to have happen?
Why does your Pass-On-Match match on both Origin and Attribute #2? What
is in attribute #2 that you are using here? That could dramatically affect
your results of what happens next. You are also forwarding to the event
window right out of the threshold, not out of the Pass, so what you see on
the event window will be all the thresholded LinkDown events and not those
matched with LinkUp. Is that what you want? You are only going to get
e-mail on the LinkDown events which are matched by LinkUp. But you are
going to see all the thresholded LinkDowns in the event window. The ones
that are not matched will not get an e-mail.
But you will get e-mail on all the Thresholded LinkUp events , though none
of them will ever go to the event window. Is that what you want?
I am not certain I can help you with something this detailed. Perhaps you
should call Support and get some individualized attention.
James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT
z_esm_karekars <z_esm_karekars@bharatpetroleum.com>@tkg.com on 04/18/2001
04:25:38 AM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
Sent by: owner-nv-l@tkg.com
To: "'nv-l@tkg.com'" <nv-l@tkg.com>
cc:
Subject: [NV-L] Ruleset configuration
Hi,
We are trying to set the ruleset for the following condition
Cisco router send the Down and UP trap msg to Netview.
1. For any node for the first trap, send mail alert and corresponding UP
trap also. ( This condition is working)
2. For continous Down and UP trap msg in 10 minutes time, need to control
and send only after 10mts corresponding trap msg alert mail. (This
condition is problem)
attached document is ruleset which i am trying.
Thanks,
santosh
We are trying to set the ruleset as follows..
**********************Ruleset starts here*************************
RuleSet2 RuleSet TrapID3 TrapID10
"" 0
TrapID3 TrapID EventThresh4
cisco 1.3.6.1.4.1.9 "2 " "0 " 0 "cisco 1.3.6.1.4.1.9"
"Cisco_Link_
Down Link Down " "" 0
EventThresh4 EventThresh ForwardCorr5 AttrJoin6 Action9
0 1 10 1 ~ Origin ~ ""
ForwardCorr5 ForwardCorr
"echo %"Node $A Interface $2 is $4%""
AttrJoin6 AttrJoin Action7 ForwardCorr8
"" 0 "" 600 "" 1 "Origin Origin 0~2 2 0~"
Action7 Action
"echo %"Node $NVA Interface $NVATTR_2 is $NVATTR_4%"|mail -s %"Node $NVA
Interfa
ce $NVATTR_2 is $NVATTR_4 at $NVT%" root" ""
ForwardCorr8 ForwardCorr
""
Action9 Action
"/usr/OV/bin/ovxbeeb %"Link $NVA $NVATTR_1 $NVATTR_2 $NVATTR_3 at $NVT%"
|mailx
-s %"$NVA $NVATTR_1 $NVATTR_2 $NVATTR_4 at $NVT%" root" test
TrapID10 TrapID EventThresh11
cisco 1.3.6.1.4.1.9 "3 " "0 " 0 "cisco 1.3.6.1.4.1.9"
"Cisco_Link_
Up Link Up " "" 0
EventThresh11 EventThresh AttrJoin6.2 Action12
0 1 10 1 ~ Origin ~ ""
Action12 Action
"echo %"Node $NVA Interface $NVATTR_2 is $NVATTR_4%"|mail -s %"Node $NVA
Interfa
ce $NVATTR_2 is $NVATTR_4 at $NVT%" root" vara
****************************Ruleset Ends
here*******************************
<<mail.rs>>
(See attached file: mail.rs)
mail.rs
Description: Binary data
|