Re: [nv-l] Dynamic workspace using Ruleset not refreshing

[James Shanks <jshanks@us.ibm.com>]

If you need this much help, then perhaps
you need to open a problem to IBM Support and get personalized help from
a specialist.

But if you think your ruleset is not
working, then I suggest you start by turning on the nvcorrd trace and examining
the log to see what might be happening.
Turn on the trace dynamically with "nvcdebug
-d all" issued from the command line.  Turn it off with "nvcdebug
-r".  When an event comes in you'll see an eyecatcher in the
log, "Received a trap"  and later "Finished with the
trap".  Everything that happens in between is nvcorrd processing
your ruleset for that event.  That may give you some idea.

Offhand, it appears that you are querying
multiple smartsets and that your are doing that BEFORE you examine the
Trap Settings. That's a very bad idea performance-wise.   You should
query the smartset only after you determine what kind of trap you have,
and you should query only one smartset for performance reasons.  Otherwise
you surely will make the event flow so slow it will never catch up.

It doesn't appear that you went out
to the nv-l archives and pulled the document I wrote and posted several
times about hints and tips on ruleset performance.  You should do
that.

 

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

Meyos Yemveng <yemveng@yahoo.ca>
Sent by: owner-nv-l@lists.us.ibm.com

06/22/2004 03:37 PM

Please respond to
nv-l

To	netview Tivoli <nv-l@lists.us.ibm.com>
cc
Subject	[nv-l] Dynamic workspace using Ruleset not refreshing

NV 7.1.3 SOLARIS 9 FP2
 
Hi Folks,
Sorry it is a Ruleset Issue again ....
 
1- I have created three smartsets for Cisco Devices one
for 7200 Series (Cisco7200), one for Routers other than 7200 (CiscoOthers)
and one for switches (CiscoSwitches) .....
 
2- I have created a Dynamic Workspace to display events
from the devices in the above mentioned smatsets when these devices are
down or their interfaces are down. The down event should be cleared (removed)
automatically from that Dynamic workspace upon a clear event.
The Intent behind this is to provide a Real-Time "Visual"
Monitoring Tool to  the NOC operator to see what Cisco Devices is
Down or Marginal
 
3- Wha I am noticing is that I will have "Router1
Down" event in my Dynamic Workspace still displaying when it should
have been cleared (I can see the "Router1 Up" on the Main Workspace
where all events are displayed).
 
4- Here attached is my Ruleset...
 
Q1: Any Idea what I am doing wrong ....
Q2: Any advice on achieving what I am trying to do
 
 
RuleSet2 RuleSet NVQryColl3 NVQryColl19 NVQryColl20 NVQryColl21
"" 0
NVQryColl3 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin CiscoDevices 1 ""
TrapID4 TrapID AttrJoin7.2
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916864 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBM_NVNUP_EV
           Specific 58916864    
 " "" 0
TrapID5 TrapID ForwardCorr6 AttrJoin7
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916865 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBM_NVNDWN_EV
          Specific 58916865      "
"" 0
ForwardCorr6 ForwardCorr
""
AttrJoin7 AttrJoin ResolvedCorr8
"" 0 "" 3240000 "" 0 "2 2 0~"
ResolvedCorr8 ResolvedCorr
""
TrapID9 TrapID AttrJoin11.2
netView6000 1.3.6.1.4.1.2.6.3 "3 " "! 0 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBMUP_NV  
             Link Up      
         " "" 0
TrapID10 TrapID AttrJoin11 ForwardCorr13
netView6000 1.3.6.1.4.1.2.6.3 "2 " "0 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBMDOWN_NV  
           Link Down      
       " "" 0
AttrJoin11 AttrJoin ResolvedCorr12
"" 0 "" 600 "" 0 "2 2 0~"
ResolvedCorr12 ResolvedCorr
""
ForwardCorr13 ForwardCorr
""
TrapID14 TrapID AttrJoin17.2
cisco 1.3.6.1.4.1.9 "3 " "0 " 0 "cisco  
            1.3.6.1.4.1.9" "Cisco_Link_Up
          Link Up        
       " "" 0
TrapID15 TrapID ForwardCorr16 AttrJoin17
cisco 1.3.6.1.4.1.9 "2 " "0 " 0 "cisco  
            1.3.6.1.4.1.9" "Cisco_Link_Down
        Link Down          
   " "" 0
ForwardCorr16 ForwardCorr
""
AttrJoin17 AttrJoin ResolvedCorr18
"" 0 "" 600 "" 0 "Origin Origin 0~"
ResolvedCorr18 ResolvedCorr
""
NVQryColl19 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin Cisco7200 1 ""
NVQryColl20 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID15 TrapID14
Origin CiscoOthers 1 ""
NVQryColl21 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin CiscoSwitches 1 ""


Thank You,
Meyos 
"ALLEZ LES LIONS INDOMPTABLES"

---

Post your free ad now! Yahoo!
Canada PersonalsRuleSet2 RuleSet NVQryColl3
NVQryColl19 NVQryColl20 NVQryColl21
"" 0
NVQryColl3 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin CiscoDevices 1 ""
TrapID4 TrapID AttrJoin7.2
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916864 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBM_NVNUP_EV
           Specific 58916864    
 " "" 0
TrapID5 TrapID ForwardCorr6 AttrJoin7
netView6000 1.3.6.1.4.1.2.6.3 "6 " "58916865 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBM_NVNDWN_EV
          Specific 58916865      "
"" 0
ForwardCorr6 ForwardCorr
""
AttrJoin7 AttrJoin ResolvedCorr8
"" 0 "" 3240000 "" 0 "2 2 0~"
ResolvedCorr8 ResolvedCorr
""
TrapID9 TrapID AttrJoin11.2
netView6000 1.3.6.1.4.1.2.6.3 "3 " "0 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBMUP_NV  
             Link Up      
         " "" 0
TrapID10 TrapID AttrJoin11 ForwardCorr13
netView6000 1.3.6.1.4.1.2.6.3 "2 " "0 " 0 "netView6000
        1.3.6.1.4.1.2.6.3" "IBMDOWN_NV  
           Link Down      
       " "" 0
AttrJoin11 AttrJoin ResolvedCorr12
"" 0 "" 600 "" 0 "2 2 0~"
ResolvedCorr12 ResolvedCorr
""
ForwardCorr13 ForwardCorr
""
TrapID14 TrapID AttrJoin17.2
cisco 1.3.6.1.4.1.9 "3 " "0 " 0 "cisco  
            1.3.6.1.4.1.9" "Cisco_Link_Up
          Link Up        
       " "" 0
TrapID15 TrapID ForwardCorr16 AttrJoin17
cisco 1.3.6.1.4.1.9 "2 " "0 " 0 "cisco  
            1.3.6.1.4.1.9" "Cisco_Link_Down
        Link Down          
   " "" 0
ForwardCorr16 ForwardCorr
""
AttrJoin17 AttrJoin ResolvedCorr18
"" 0 "" 600 "" 0 "Origin Origin 0~"
ResolvedCorr18 ResolvedCorr
""
NVQryColl19 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin Cisco7200 1 ""
NVQryColl20 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID15 TrapID14
Origin CiscoOthers 1 ""
NVQryColl21 NVQryColl TrapID4 TrapID5 TrapID9 TrapID10 TrapID14 TrapID15
Origin CiscoSwitches 1 ""