[Top] [All Lists]

Re: [nv-l] Filter editor question

To: nv-l@lists.us.ibm.com
Subject: Re: [nv-l] Filter editor question
From: James Shanks <jshanks@us.ibm.com>
Date: Tue, 13 Sep 2005 10:31:37 -0400
Delivery-date: Tue, 13 Sep 2005 15:33:27 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
In-reply-to: <OFFC3001F8.050F62C2-ON8625707B.004CBE77-8625707B.004EFAEC@bluecrossmn.com>
Reply-to: nv-l@lists.us.ibm.com
Sender: owner-nv-l@lists.us.ibm.com
So what trap variable contains the message?  trapd.conf will tell you.
And what do you want to do when you have a match?

A filter only alters the display of an event window.  A ruleset may have an
action attached.  Presumably you could just use an Event Attribute node in
a ruleset to match the varbind number of the trap to the correct string and
connect it to an Action, some script you write.  But a better ruleset would
be Trap Settings for the correct enterprise first.

James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group

             Sent by:                                                   To 
             owner-nv-l@lists.         nv-l@lists.us.ibm.com               
             us.ibm.com                                                 cc 
             09/13/2005 10:22          [nv-l] Filter editor question       
             Please respond to                                             

Hello List!

Running Netview 7.1.3 on Solaris 8

I am trying build a filter/ruleset that will match on criteria specified
in the message field of the trap.

Tue Sep 13 08:15:28 2005 server_name.domain.com  A rfFaxServer 6 2 4 args:
LGSD:Library already loaded.

The last portion of the line above is what I need to match because the
software vendor has most of their traps with the same specific and generic
trap ids for numerous meaningful traps with the same severity(no idea why)
The message is the only thing that is specific to the different traps
being generated.

Or if anyone has done a fine job monitoring Captaris Rightfax please share


Mike Noonkesser

Important news about email communications:

If our business rules identify sensitive information, you will receive a
ZixMail Secure Message with a link to view your message. First-time
recipients will be asked to create a password before they are granted
access. To learn more about ZixMail, ZixCorp Secure Email Message Center,
and other ZixCorp offerings, please go to

The information contained in this communication may be confidential,
and is intended only for the use of the recipient(s) named above.
If the reader of this message is not the intended recipient, you
are hereby notified that any dissemination, distribution, or
copying of this communication, or any of its contents, is strictly
prohibited. If you have received this communication in error,
please return it to the sender immediately and delete the original
message and any copy of it from your computer system. If you have
any questions concerning this message, please contact the sender.

Unencrypted, unauthenticated Internet e-mail is inherently insecure.
Internet messages may be corrupted or incomplete, or may incorrectly
identify the sender.

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web