[Top] [All Lists]

RE: [nv-l] Ruleset

To: nv-l@lists.us.ibm.com
Subject: RE: [nv-l] Ruleset
From: James Shanks <jshanks@us.ibm.com>
Date: Wed, 6 Apr 2005 10:33:08 -0400
Delivery-date: Wed, 06 Apr 2005 15:33:35 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
In-reply-to: <C353F42ACF29E240B9050B86F1852A4F0C273E@nlspm204.emea.corp.eds.com>
Reply-to: nv-l@lists.us.ibm.com
Sender: owner-nv-l@lists.us.ibm.com

It depends upon what sort of documentation you are looking for.

The source character in trapd.conf is a wholly arbitrary convention.  We
ship with it defined but the user can change it to anything he likes --
there is nothing to stop him except his fear of confusion.  As such the
source character is not  really a part of the incoming trap, while the
attributes such as origin, and the variable bindings 1, 2, and so on, are.
The source character, like the event category, and event severity are user
inventions added to the trap and not part of it.  They are merely
formatting devices.

You can access these elements in a ruleset, either in an Event Attributes
node or in the Action node of a ruleset.  The former is addressed in
Chapter 5 of the Administrator's Guide, where all event formatting and
correlation is discussed.   There is documentation about the Action node in
the various 7.1.4 FixPack Release Notes, because it is a relatively new
thing which has not made its way into the shipped documentation yet.  But
you should be able to find it in the very latest on-line documentation
available at
Be sure to click the icon for the revised December 2004 html version.

For now here is what the FixPack Release Notes say:
Fix pack notes
Since version 5.1 of the Tivoli NetView for UNIX program, the Action node
rule set added three additional variables to the end of every trap passed
through it. The variables,in order, are:
      Trap severity
      Trap source character
      Trap category
These variables are obtained from the trapd.conf file to make these items
available to the user's scripts.

In version 6.0.3 of the Tivoli NetView program, the new NVATTR_COUNT
attribute was added to tell the user how many variables the trap now
contains, and it permitted easier reference of the these last three
      NVATTR_n variable, where n = NVATTR_COUNT-1 was the trap category
      NVATTR_n variable, where n = NVATTR_COUNT-2 was the trap source
      NVATTR_n variable, where n = NVATTR_COUNT-3 was the trap severity

These additional varbinds are now exported into the following
easy-to-reference variables:

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web