Re: [nv-l] Filter events

[James Shanks <jshanks@us.ibm.com>]

I think you are mistaken about this.

While you can filter the traps from your event browser, they will still be logged and stored in the ODBC database.  They will not be thrown away, and the 
NetView box will use a lot of resources dealing with them.  It is better to stop the traps rather than hide them.  But you can create a custom filter for your event browser and view the traps with that rather than using "All events" as you probably are now, if that is what you want.  Pull down the menu button at the top right of the browser and you will see that you can select different categories of events, the last one being "Custom Filter" .  If you use Trap Settings to define the authentication failure trap for Microsoft, then you can also create a filter to block it from the display when you use that filter.  But this does nothing to take the processing load off NetView.

From what you are saying I cannot determine whether NetView is causing the authentication failures by trying to talk to those devices during the discovery phase  or whether the failures are from an external source, some other agent in your network is trying to query them with an incorrect string.

If you know what the proper community string is for these nodes, then you should use SNMP Options (under Tivoli NetView --> Tasks from the Start Menu or Options --> SNMP . . . from the NetView Console) and modify what you have there so that the proper string is used by NetView.   This will prohibit netmon or snmpcollect from using the wrong string and causing the problem.

If the source is not NetView, then someone has configured these remote devices to send those traps to NetView, and you should stop them at the source by reconfiguring them not to do that.


James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

nraaman@chennai.tcs.co.in Sent by: owner-nv-l@lists.us.ibm.com 11/21/2003 06:06 AM Please respond to nv-l

To:        nv-l@lists.us.ibm.com, nv-l@lists.tivoli.com         cc:                 Subject:        [nv-l] Filter events

Hi,

I working NetView 7.1.4 AIX on TME. How to filter or Stop the Incorrect community
name(Authentication Failure). For every second netview is reciving this event. The events
are recived from nodes are not discovered.These event should be droped.

Please advice how to go .


Thanks & Regards
N.Raaman(Ramamoorthy)
Asst.Engineer,
NOC-Chennai,
Ph:044-55502164,
VOIP:4504.





#### InterScan_Disclaimer.txt has been removed from this note on November 21, 2003 by James Shanks