|
James
and Jane,
Thanks
a bunch for both of your inputs !!!! The list out here wouldn't be as
helpful if you two both weren't involved....thanks again as always
!!!
Brian
Brian -
You are on Windows are you
not? It is important to understand that NetView for UNIX and NetView
for Windows, while quite similar are NOT the same product. Only about
60 per cent of the code is common. Windows needs a separate GUI and many
of its daemons work differently because of the Windows environment. They
were designed by different people at different times. It is important to
remember this and to state what platform you are using when you ask a
question.
On the Windows platform,
event correlation is very much more difficult than on UNIX. On UNIX the
correlation daemon gets the events before they are sent to TEC. The flow
is from trapd to nvcorrd (the correlation daemon) to nvserverd (which has an
internal TEC adapter) and then on to individual event displays and to
TEC. On Windows trapd stores the event in the ODBC database directly and
then passes a copy directly to both the correlation daemon (nvcord) and to the
TEC adapter (nv6k_tecad). There is no way for the correlation daemon to
modify the event the TEC adapter gets directly. Your correlation on
Windows is limited to smartset membership, which is the only NetView facility
that the tecad adapter checks in Windows before sending the event.
Everything else you can do is done with go-no filter statements in the
tecad_nv6k.conf file.
You can do
correlation with nvcord daemon yourself on Windows but to get really creative
you would need a UNIX system because there is no NetView ruleset editor on
Windows. But you could do simple things, like send a page or an email
right from an event or from a very simple ruleset , rather than forwarding an
event to TEC and doing it there.
James Shanks
Level 3 Support
for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM
Software Group
|
| Brian Kraftchick
<Brian.Kraftchick@odfl.com>
Sent by: owner-nv-l-digest@lists.us.ibm.com
10/21/2003 01:07 PM
Please respond to nv-l
|
To:
"'nv-l@lists.us.ibm.com'"
<nv-l@lists.us.ibm.com>
cc:
Subject: RE: [nv-l] Rulesets /
Alerting
|
In what direction should I go to learn how to correlate
events on the NetView server vs. doing so in TEC. I'd certainly prefer
to keep TEC as clean as possible....I wasn't aware of any ability to do
correlation at the NetView level.
-----Original Message-----
From: Fernandez, Rick
[mailto:Richard.Fernandez@msfc.nasa.gov]
Sent: Tuesday, October 21,
2003 12:55 PM
To: 'nv-l@lists.us.ibm.com'
Subject: RE:
[nv-l] Rulesets / Alerting
We
use TEC for alerts but we first correlate the events on the NetView server
then forward to TEC for additional correlation.
Thank You!
Rick Fernandez
Phone: 256-544-5106
Computer
Science Corporation
Marshall Space Flight Center
From: CMazon@commercebankfl.com
[mailto:CMazon@commercebankfl.com]
Sent: Tuesday, October 21, 2003
11:46 AM
To: nv-l@lists.us.ibm.com
Subject: [nv-l]
Rulesets / Alerting
Hi List,
I
was trying to get a feel from how many out there use Netview by itself for
alerting and event correlation or if they use TEC?
Carlos
|