Hi James,
I find out how to correct the problem but did not find where does it come
from.
To correct the problem I have edited the trap with the command xnmtrap and
just delete $2 and reput $2 in the log events field and it works.
Perhaps there is an error in my addtrap script but I don't understand
because all other traps added by this script work?
Here is my addtrap script :
#!/bin/sh
addtrap \
-n Cisco_Syslog -l %BGP-5-ADJCHANGE -i 1.3.6.1.4.1.9999 \
-g 6 -s 1197 -S 4 -o A -t 0 -c "Error Events" \
-F '$2' \
-D "neighbor [int] [chars] [chars]"
addtrap \
-n Cisco_Syslog -l %UDLD-3-DISABLE -i 1.3.6.1.4.1.9999 \
-g 6 -s 603 -S 4 -o A -t 0 -c "Error Events" \
-F '$2' \
-D "Unidirectional link detected on port [dec][dec]. Port disabled"
addtrap \
-n Cisco_Syslog -l %PM-4-ERR_DISABLE -i 1.3.6.1.4.1.9999 \
-g 6 -s 8000 -S 4 -o A -t 0 -c "Error Events" \
-F '$2' \
-D "[chars] error detected on [chars], putting [chars] in err-disable
state."
Cordialement.
Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com
James Shanks
<jshanks@us.ibm.c
om> To
Sent by: nv-l@lists.us.ibm.com
owner-nv-l@lists. cc
us.ibm.com
Subject
Re: [nv-l] Pb with messages on NV
26-08-2005 16:52 7.1.4
Please respond to
nv-l
Well, Maxine, you may have to open a problem to support, because your test
works just fine on my AIX box, with the same level of NetView.
I defined the trap in trapd.conf just as you did,
%PM-4-ERR_DISABLE {1.3.6.1.4.1.9999} 6 8000 A 4 0 "Error Events"
$2
SDESC
[chars] error detected on [chars], putting [chars] in err-disable state.
EDESC
And then I sent a dummy with snmptrap. I deduced how yours had to look
from the nvserverd.log message. Here's what I executed:
#!/bin/ksh
#
# shell script trick. This syntax ${destination:-$mymachine} says
# use $mymachine if $destination is null.
destination=$1
sender=$2
mymachine=`hostname`
/usr/OV/bin/snmptrap \
${destination:-$mymachine} .1.3.6.1.4.1.9999 \
${sender:-$mymachine} 6 8000 1 \
.1.3.6.1.4.1.9999.1.0 OctetStringascii "PM-4-ER R_DISABLE" \
.1.3.6.1.4.1.9999.2.0 OctetStringascii "link-flap error detected on
Fa1/0/10, putting Fa1/0/10 in err-disable state"
And I got what I expected in trapd.log,
1125065593 2 Fri Aug 26 10:13:13 2005 whiskey A
link-flap error detected on Fa1/0/10, putting Fa1/0/10 in err-disable state
And in nvserverd.log,
08/26/05 10:13:14
TEC_ITS_BASE;source=nvserverd;sub_source=A;origin=9.27.144.49;hostname=whiskey;adapter_host=whiskey.raleigh.ibm.com;category=1;date="08/26/05
10:13:14";severity=CRITICAL;status=OPEN;msg="link-flap error detected on
Fa1/0/10, putting Fa1/0/10 in err-disable state
";nv_enterprise=maxine_test;nv_generic=6;nv_specific=8000;nv_var1="PM-4-ER
R_DISABLE";nv_var2="link-flap error detected on Fa1/0/10, putting Fa1/0/10
in err-disable state";END
So unless your test trap script didn't send what mine did, I have no idea
what went wrong. If after examining what you did, you still cannot figure
it out, I suggest a call to Support.
James Shanks
Level 3 Support for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group
Maxime TRANNOY
<MTRANNOY@fr.ibm.
com> To
Sent by: nv-l@lists.us.ibm.com
owner-nv-l@lists. cc
us.ibm.com
Subject
[nv-l] Pb with messages on NV 7.1.4
08/26/2005 10:01
AM
Please respond to
nv-l
Hello all,
I've just installed a new server with 7.1.4 FP3 on AIX.
As usual I use my addtrap script to add my specific traps
and check in the /C/trap.conf to see if the result was correct
%PM-4-ERR_DISABLE {1.3.6.1.4.1.9999} 6 8000 A 4 0 "Error Events"
$2
SDESC
[chars] error detected on [chars], putting [chars] in err-disable state.
EDESC
Then I send a trap to test my addtrap command.
The result in the trapd.log was correct
1125061147 2 Fri Aug 26 14:59:07 2005 Test device A link-flap error
detected on Fa1/0/10, putting Fa1/0/10 in err-disable state
but on the control desk I did not see the message???? only the 2 field Test
Device A and the rest of the line is blank.
In the nvserd.log I found that the field msg was empty. But normally with
my trap description msg field should be equal to $2. It was the normal
behaviour in 7.1.3?
08/26/05 14:59:07
TEC_ITS_BASE;source=nvserverd;sub_source=A;origin=10.10.4.51;hostname=test
Device;adapter_host=192.168.254.220;category=1;date="08/26/05
14:59:07";severity=CRITICAL;status=OPEN;msg="
";nv_enterprise=Cisco_Syslog;nv_generic=6;nv_specific=8000;nv_var1="PM-4-ERR_DISABLE";nv_var2="link-flap
error detected on Fa1/0/10, putting Fa1/0/10 in err-disable state";END
Can someone explain me what is the problem and how can I my message back on
my GUI.
Cordialement.
Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com
|