nv-l
[Top] [All Lists]

[NV-L] Ruleset Editing Questions

To: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Subject: [NV-L] Ruleset Editing Questions
From: sean.lawrence@cantire.com
Date: Tue, 24 Oct 2006 08:13:55 -0400
Delivery-date: Tue, 24 Oct 2006 15:41:06 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
List-help: <mailto:nv-l-request@lists.ca.ibm.com?subject=help>
List-id: Tivoli NetView Discussions <nv-l.lists.ca.ibm.com>
List-post: <mailto:nv-l@lists.ca.ibm.com>
List-subscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=subscribe>
List-unsubscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=unsubscribe>
Reply-to: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Sender: nv-l-bounces@lists.ca.ibm.com
I am trying to set up some rules to filter out traps coming for 
Ciscoworks. We are getting way to many now that the network guys have 
turned it on.

Is there a way to simply drop traps that have not been defined in the 
trapd.conf? I do not want to keep them in Netview or forward them to TEC.

On a side note I am having trouble setting up simple rules.

I am receiving a trap from Ciscoworks with the OID of 1.3.6.1.4.1.9.1.502 
I do not want this forwarded to TEC

In the ruleset defined in tecint.conf I created an Event Attributes rule. 
It looks like this:

Event Stream -> (EnterpriseOID <>  1.3.6.1.4.1.9.1.502) -> Forward

I ran the nvtecia -reload command to reload the ruleset and I am still 
getting these forwarded. Is there something else required to load modified 
rulesets?

Sean
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web