Re: [nv-l] Ruleset Question

[James Shanks <jshanks@us.ibm.com>]

You haven't identified a match condition, so I would say Threshold.
You'd want your TESTTRAP to be the first one in an hour, and that would launch your script.

But this business about the second hour is not well-defined.  There is no mechanism for escalation unless you put a timer in your original script which goes to sleep for an hour and wakes up to do your escalation.   When the original hour is up and another TESTTRAP comes in it will launch a new copy of the original script, not some new one.  

I think you need to give some more thought to your application design. 

Surely you'd need some way to cancel the original script or to check at least whether escalation is still required.  My guess is that you are going to need more than one trap and probably a more complex ruleset.  Some folks write to temporary files when they start a long running process and then have other events which clear out those files when the process should stop.  You can also use fields in the database for this.  That's exactly what the Corrstat1 - Corrstat4 fields are for, so that users can set and clear them to determine when and how their automation should proceed.   When you set them in a ruleset, they will get added to the node you set them for if they don't exist.

HTH

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

"Colson, Donna" <Donna.Colson@ssa.gov> Sent by: owner-nv-l-digest@lists.us.ibm.com 10/22/2003 03:25 PM Please respond to nv-l

To:        "'nv-l@lists.us.ibm.com'" <nv-l@lists.us.ibm.com>         cc:                 Subject:        [nv-l] Ruleset Question

I am confused about which Ruleset Template to use.  This is what I want...

The first TESTTRAP comes in to Netview and is sent directly to script for
processing.
Any TESTTRAP that comes into Netview for a period of 1 hour should get
dropped. 

In other words we want to send a page on the first trap and do nothing for
an hour.  In the second hour we want to send another page and hold
everything else for an hour.  We probably want to escalate as well.

Am I using Thersholds or Pass on Match here?