I will let others discuss your specific questions about
the alternatives, but I would like to point out a simple way
to use the Rulesets to forward unsolicited traps straight
to the T/EC.
Since you are considering touching every trap anyway,
you might consider changing that source letter (u, or A,
or whatever), to an unused letter. Then your ruleset can
just check that Event Attribute, and if it is the special one,
forward it. Done. This is nice for traps for which you intend
to apply no logic.
Now, you should be sure you really want to send all
occurances of that trap to the T/EC, and don't include
any that could potentially cause a storm. That same
applies whether you configure it via trapd.conf or via
this straight-pipe ruleset method.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Detroit
netview@toddh.
net (Todd H.) To: IBM NetView Discussion
<nv-l@tkg.com>
Sent by: cc:
owner-nv-l@tkg Subject: [NV-L] sending trap as
TEC event
.com w/o using ruleset--example?
10/15/01 06:09
PM
Please respond
to IBM NetView
Discussion
Greetings,
I'd like to eliminate some branches from my correlation rulesets--for
example, sending a TEC event in response to a simple trap. Hertofore,
I've done this with "trap settings" nodes followed by "Forward"
nodes--and the size of the ruleset soon became well, very large for
the wide variety of traps we're supporting.
I've recently learned that you can configure this simple forwarding of
traps as TEC events without loading down the ruleset correlation
engine--but would like to know how. In the Event Configuration
settings, I know how to assign TEC slots, and event message formats.
I'm just not sure what external command string to specify on that
window (Options>EVent Configuration> Trap Customization SNMP, select a
trap, then ModifyEvent)
Question 1) "Forward trap" setting -- what does this do?
Question 2) "Command for Automatic Action" - I'm sure that wpostemsg
or postemsg is involved, but I think I just need an example that shows
how/what environment variables are required or implied so the TEC
adapter passes a TEC event with the message slots populated as
desired.
Question 3) What daemon forks off the action in Command for Automatic
Action? Actionsrv? Or something else?
TIA for any insight or advice.
--
Todd H.
http://www.toddh.net/
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|