Are you asking why there are event categories other than "Log Only" and
"Don't Log or Display"?
They are there so that you can categorize events and have different
workspaces show different subsets of events, for whatever operational
purposes you might want. And since you can also access categories in
rulesets, they allow actions based on that grouping too.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and NT
Tivoli Software / IBM Software Group
"Treptow, Craig" <Treptow.Craig@principal.com>
04/05/2002 09:35 AM
To: "NetView List (E-mail)" <nv-l@lists.tivoli.com>
cc: "'Dermott'" <dermottA@attbi.com>
Subject: RE: [nv-l] Configuring events to log to another log
file?
Thanks. I understand what you're saying. I was just hoping for something
slightly cleaner.
So does anybody know the point to these categories? "Log Only", and
"Don't Log or Display", are the only two that seem to make a difference.
-----Original Message-----
From: Dermott [mailto:dermottA@attbi.com]
Sent: Thursday, April 04, 2002 1:20 PM
To: Treptow, Craig; NetView List (E-mail)
Subject: Re: [nv-l] Configuring events to log to another log file?
Hey Craig,
Auth Failures are vendor specific.
Cisco, Microsoft & Xylan, for instance, send them under their own OID.
For example, for cisco I coded the auth failure trap to also show the
cause (authAddr):
(Most other vendors dont fill in this field).
Cisco_Auth_Failure {1.3.6.1.4.1.9} 4 0 A 2 0 "Status Events"
Cisco Incorrect Community Name (authenticationFailure Trap) authAddr: $1.
You could also populate the "Command for Automatic Actions" field to
write these to a separate file or send an email to a service account .....
Good Luck,
--Dermott
----- Original Message -----
From: "Treptow, Craig" <Treptow.Craig@principal.com>
To: "NetView List (E-mail)" <nv-l@lists.tivoli.com>
Sent: Thursday, April 04, 2002 1:42 PM
Subject: [nv-l] Configuring events to log to another log file?
> Netview 6.0.2 AIX 4.3
>
> I would like to take all the authentication error traps and log them to
their own file rather than trapd.log.
> It looks like either modifying the "AuthenticationFailures" event
category, or creating a new category could work. Does anybody
know if this is possible, or where it is mentioned? I'm having trouble
find a good discussion of this in the manuals.
>
> Thanks.
>
>
> Craig
>
> A dozen, a gross, and a score,
> Plus three times the square root of four,
> Divided by seven,
> Plus five times eleven,
> Equals nine squared plus zero, no more.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
> For additional commands, e-mail: nv-l-help@lists.tivoli.com
>
> *NOTE*
> This is not an Offical Tivoli Support forum. If you need immediate
> assistance from Tivoli please call the IBM Tivoli Software Group
> help line at 1-800-TIVOLI8(848-6548)
>
---------------------------------------------------------------------
To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
For additional commands, e-mail: nv-l-help@lists.tivoli.com
*NOTE*
This is not an Offical Tivoli Support forum. If you need immediate
assistance from Tivoli please call the IBM Tivoli Software Group
help line at 1-800-TIVOLI8(848-6548)
|