Francois,
This may not directly answer your question but I'll explain how I do it.
I use a node up event to clear both interface down and node down events. I
use the "reset on match" node with a 5 minute timer. So if an interface down
or node down event occurs and a node up event for the same "Origin" does NOT
occur in 5 minutes, I run a script via an action node to page on call
personnel.
Hopefully this will give you an idea.
Ray Westphal
Enterprise Rent-A-Car
-----Original Message-----
From: Francois Le Hir/Quebec/IBM [mailto:flehir@ca.ibm.com]
Sent: Friday, May 24, 2002 5:15 PM
To: nv-l@lists.tivoli.com
Subject: [nv-l] ruleset problem : Interface UP / Node UP
Hi list,
I am trying to write a ruleset to accomplish the following:
- if we receive an Interface Down and then an Interface Up trap for the
same device: both trap are resolved
- if we receive an Node Down and then an Node Up trap for the same device:
both trap are resolved
- if we receive an Interface Down and then a Node Down for the same device:
the interface down is resolved and only the Node Down trap appear in the
event viewer.
- if we receive an Interface Up and then a Node Up for the same device: the
interface Up is resolved and only the Node Up trap appear in the event
viewer.
For the two first items it's very easy to accomplish with a "Pass on match"
and a resolve.
However, the resolve function remove both trap and for the "Interface
Up"/"Node Up" trap, I want the most "global" one (Node Up) to stay in the
event viewer and only the "Interface Up" to be resolved.
How am I supposed to accomplish that ?
I tried with a second "trap setting" after the "Pass on match" but it
doesn't seams to work the way I want. I would even say that the result is
inconsistent because from time to time, some of the events I generate don't
go through at all. I am using different event viewer to compare between
"forwardall" and my ruleset.
Here is my ruleset:
(See attached file: ruleset.rc)
Did some of you have more success to accomplish the same or similar ?
Thanks
Regards,
Francois Le Hir
Network Projects & Consulting Services
IBM Global Services
Phone: (514) 205 6695
|