Re: filter editor vs ruleset editor

["CATALINA MARTINEZ" <CATALINA.MARTINEZ@tlc.state.tx.us>]

This is a MIME message. If you are reading this text, you may want to 
consider changing to a mail reader or gateway that understands how to 
properly handle MIME multipart messages.

Thanks James

Its the right trap (enterprise, generic, specific). I check t he 
/usr/OV/conf/C/trapd.conf it does show
sysConfigChange {1.3.6.1.4.1.9.5} 6 9 A 3 0 "Log Only Events"

which is correct. I havent received any traps yet. so I supposed it worked. I 
am unsure why I got an event when i did it from the command line.

Thanks for the info.

>>> James_Shanks@tivoli.com 05/15/01 09:55AM >>>

You are doing the right kind of thing but perhaps you have the details
wrong.
The snmptrap you sent is for a trap with the Cisco enterprise id of
".1.3.6.4.1.9.5 " and the specific id of "9".  Is that the exact trap you
set to "Log Only"?
If not, then that is why it showed up.  If you changed one with the
specific id of "2" for example, and then sent one with a "9", then "9"
would stiil default to being seen.

What does the trap entry you customized say?  What enterprise and what trap
id?

If you are just sure you set the right one, what does the entry for it say
in /usr/OV/conf/C/trapd.conf?
If you look at it there, does it say "Log Only"?


James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT



"CATALINA MARTINEZ" <CATALINA.MARTINEZ@tlc.state.tx.us>@tkg.com on
05/15/2001 09:52:52 AM

Please respond to IBM NetView Discussion <nv-l@tkg.com>

Sent by:  owner-nv-l@tkg.com


To:   <nv-l@tkg.com>
cc:
Subject:  Re: [NV-L] filter editor vs ruleset editor




Hello,

Jane, thanks for the info. I did what you suggested. (logging  only via
trap customization) No traps were received in events "display" window  for
the past hour. I tried testing it using snmptrap; and it showed up in the
event log. I thought it wouldnt show up.

snmptrap servername .1.3.6.4.1.9.5  othermachine 6 9 0

is this correct, should it have displayed in the events.
Is there another way of testing this?

Please advise


>>> jane.curry@skills-1st.co.uk 05/14/01 04:09PM  >>>
If you want to prevent everyone from seeing an event in a  workspace, use
Trap Customisation (from the Options menu) and specify your  particular
trap as "Log Only".  That way, no-one sees it but it will  appear in
/usr/OV/log/trapd.log, for audit purposes.  If you don't need  the record
at all, set the event to "Don't Log or  Display".

Cheers,
Jane
--
Tivoli Certified Enterprise Consultant  & Instructor
Skills 1st Limited, 2 Cedar Chase, Taplow, Bucks, SL6 0EU,  UK
Tel: +44 (0)1628 782565
Copyright (c) 2001 Jane Curry  <jane.curry@skills-1st.co.uk>.  All  rights
reserved.


_________________________________________________________________________
NV-L  List information and Archives: http://www.tkg.com/nv-l



_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l

Thanks James

 

Its the right trap (enterprise, generic, specific). I check t he /usr/OV/conf/C/trapd.conf it does show

sysConfigChange {1.3.6.1.4.1.9.5} 6 9 A 3 0 "Log Only Events"

 

which is correct. I havent received any traps yet. so I supposed it worked. I am unsure why I got an event when i did it from the command line.

 

Thanks for the info.

>>> James_Shanks@tivoli.com 05/15/01 09:55AM >>>

You are doing the right kind of thing but perhaps you have the details
wrong.
The snmptrap you sent is for a trap with the Cisco enterprise id of
".1.3.6.4.1.9.5 " and the specific id of "9".  Is that the exact trap you
set to "Log Only"?
If not, then that is why it showed up.  If you changed one with the
specific id of "2" for example, and then sent one with a "9", then "9"
would stiil default to being seen.

What does the trap entry you customized say?  What enterprise and what trap
id?

If you are just sure you set the right one, what does the entry for it say
in /usr/OV/conf/C/trapd.conf?
If you look at it there, does it say "Log Only"?


James Shanks
Team Leader, Level 3 Support
Tivoli NetView for UNIX and NT



"CATALINA MARTINEZ" <CATALINA.MARTINEZ@tlc.state.tx.us>@tkg.com on
05/15/2001 09:52:52 AM

Please respond to IBM NetView Discussion <nv-l@tkg.com>

Sent by:  owner-nv-l@tkg.com


To:   <nv-l@tkg.com>
cc:
Subject:  Re: [NV-L] filter editor vs ruleset editor




Hello,

Jane, thanks for the info. I did what you suggested. (logging  only via
trap customization) No traps were received in events "display" window  for
the past hour. I tried testing it using snmptrap; and it showed up in the
event log. I thought it wouldnt show up.

snmptrap servername .1.3.6.4.1.9.5  othermachine 6 9 0

is this correct, should it have displayed in the events.
Is there another way of testing this?

Please advise


>>> jane.curry@skills-1st.co.uk 05/14/01 04:09PM  >>>
If you want to prevent everyone from seeing an event in a  workspace, use
Trap Customisation (from the Options menu) and specify your  particular
trap as "Log Only".  That way, no-one sees it but it will  appear in
/usr/OV/log/trapd.log, for audit purposes.  If you don't need  the record
at all, set the event to "Don't Log or  Display".

Cheers,
Jane
--
Tivoli Certified Enterprise Consultant  & Instructor
Skills 1st Limited, 2 Cedar Chase, Taplow, Bucks, SL6 0EU,  UK
Tel: +44 (0)1628 782565
Copyright (c) 2001 Jane Curry  <jane.curry@skills-1st.co.uk>.  All  rights
reserved.


_________________________________________________________________________
NV-L  List information and Archives: http://www.tkg.com/nv-l



_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l