nv-l
[Top] [All Lists]

[nv-l] Netview - Tec integration: netview.rls logic

To: nv-l@lists.us.ibm.com
Subject: [nv-l] Netview - Tec integration: netview.rls logic
From: Francois Le Hir <flehir@ca.ibm.com>
Date: Tue, 23 Mar 2004 09:52:00 -0500
Delivery-date: Tue, 23 Mar 2004 15:00:20 +0000
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
Reply-to: nv-l@lists.us.ibm.com
Sender: owner-nv-l@lists.us.ibm.com



I am working on the integration between Netview 7.1.4 and TEC 3.9 using the
netview.rls ruleset.
In the logic, I see that the only case with an interface being the root
cause for a router is when  the router is marginal or unreachable. If the
router is down, then the router is the cause. However, when an interface is
identified as being the cause, what is supposed to happen with the other
interface events that we might have for the same device ?

Maybe I am missing something but the way the logic is, all the other
interface events are not correlated.
Example:

in Netview: 2 interface unreachable event and a router unreachable event.

1079998459 3  Mon Mar 22 23:34:19 2004 ronex-ppap091.aircanada.ca N _SEV2_
Interface 10.231.192.1 Unreachable. -
ronex-ppap091.aircanada.ca:10.231.192.1 10.231.192.1 (8 args)
(netView6000)t6;s58916970
1079998459 3  Mon Mar 22 23:34:19 2004 ronex-ppap091.aircanada.ca N _SEV2_
Interface lan2 Unreachable. - ronex-ppap091.aircanada.ca:lan2 172.20.43.205
(8 args) (netView6000)t6;s58916970
1079998459 3  Mon Mar 22 23:34:19 2004 ronex-ppap091.aircanada.ca N _SEV1_
Router ronex-ppap091.aircanada.ca Unreachable. (8 args)
(netView6000)t6;s58916972

ovtopodump ronex-ppap091.aircanada.ca
CLASS    OBJECT ID      OBJECT               STATUS    IP ADDRESS
NODES    342481/342477  ronex-ppap091.aircanada.ca Unreachable 10.231.192.1
         342481/342515  ronex-ppap091.aircanada.ca Unmanaged 32.0.231.192
         342481/342516  ronex-ppap091.aircanada.ca Unreachable
172.20.43.205


In TEC:

Mon Mar 22 23:37:35 CUT 2004: (03/22/04 23:34:19 1079998459-2)
ronex-ppap091.aircanada.ca - MINOR event: B/SLA1/SEV1 - Interface
10.231.192.1 Unreachable.
Mon Mar 22 23:37:35 CUT 2004: (03/22/04 23:34:19 1079998460-1)
ronex-ppap091.aircanada.ca - MINOR event: B/SLA1/SEV1 - Interface lan2
Unreachable. [router_correlate_interface:cause]

The router unreachable event has been correlated as an effect of one of the
interface unreachable event. Now what do we do with the other interface
unreachable event ?
Of course I could write a rule to correlate it with the first one... but I
am just wondering if I am missing something ...

Salutations, / Regards,

Francois Le Hir
Network Projects & Consulting Services
IBM Global Services
Phone: (514) 205 6695


<Prev in Thread] Current Thread [Next in Thread>
  • [nv-l] Netview - Tec integration: netview.rls logic, Francois Le Hir <=

Archive operated by Skills 1st Ltd

See also: The NetView Web