RE: [nv-l] Hostname field is empty in TEC event.

[James Shanks <jshanks@us.ibm.com>]

Test fixes for IY52429 are available now.  Contact Support

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

"Hill, Channing" <CHill@bbandt.com> Sent by: owner-nv-l@lists.us.ibm.com 02/10/2004 11:29 AM Please respond to nv-l

To:        "'nv-l@lists.us.ibm.com'" <nv-l@lists.us.ibm.com>         cc:                 Subject:        RE: [nv-l] Hostname field is empty in TEC event.

I have the same problem and have a PMR opened. It was escalated to L2
Support and an APAR is in the works to correct the problem.....APAR IY52429
They have not given me a time of when it will be available.

Channing Hill
EMS Analyst II
BB&T
(252) 246-3642


-----Original Message-----
From: bill.kellam@worldspan.com [mailto:bill.kellam@worldspan.com] 
Sent: Tuesday, February 10, 2004 11:14 AM
To: nv-l 
Subject: [nv-l] Hostname field is empty in TEC event.






Hello,

My installation is nv7.1.4, AIX 5.2.

I'm forwarding an event to TEC and the hostname slot shows up empty.
Shouldn't it correspond to the trap hostname? Here is my test results using
snmptrap.  I get the resolved IP address in the origin slot, but the
hostname is empty.

command:
/usr/OV/bin/snmptrap phapnnv1.wspan.net .1.3.6.1.4.1.5956
core-5500-h1.wspan.net 6 102 0 \
             .1.3.6.1.4 octetstring "MY MONITOR" \
             .1.3.6.1.4 octetstring "Bills Test Trap Page" \
             .1.3.6.1.4 octetstring " Are You Alive : FAIL " \
             .1.3.6.1.4 octetstring "CRITICAL"

trapd.log:
1076352217 3  Mon Feb 09 13:43:37 2004 core-5500-h1.wspan.net    A WWW_MON
Alert

wtdumprl:
1~47915~1~1076423660(Feb 10 09:34:20 2004)
### EVENT ###
WWW_MON;
source=nvserverd;
nv_generic=6;
category=1;
nv_var4="CRITICAL";
nv_var3=" Are You Alive :  FAIL ";
msg="WWW_MON Alert ";
nv_var2=" Bills Test Trap Page ";
date="02/10/04 09:34:18";
nv_var1=" MY MONITOR ";
nv_specific=102;
nv_enterprise=Worldspan;
status=OPEN;
adapter_host=phapnnv1.wspan.net;
hostname=;
origin=10.5.1.253;
sub_source=A;
END

### END EVENT ###
PROCESSED


trapd.conf:
convertedWWWMON {1.3.6.1.4.1.5956} 6 102 A 4 0 "Status Events" WWW_MON Alert
EVENT_CLASS WWW_MON SDESC This event is WWW-MON event. EDESC


Forward and reverse lookup correct:
Name:    core-5500-h1.wspan.net
Address:  10.5.1.253

tecint.conf:
ServerLocation=tivtec1.worldspan.com
TecRuleName=tecfwd.rs
ServerPort=5529
DefaultEventClass=TEC_ITS_BASE
BufferEvents=YES
UseStateCorrelation=YES
StateCorrelationConfigURL=file:///usr/OV/conf/nvsbcrule.xml
## The following four lines are for debugging the state correlation engine #
LogLevel=ALL # TraceLevel=ALL # LogFileName=/usr/OV/log/adptlog.out
# TraceFileName=/usr/OV/log/adpttrc.out

Best regards,
Bill Kellam
Enterprise Integration and Management