Bill and Leslie---thanks for your replies! I've also opened up a PMR to
see what comes out of that. I'm assuming NV is just passing a stream of
variables if I use an inline action, so it may make sense to write a
little script that returns 0 if the origin matches one of the IP
addresses.
-----Original Message-----
From: Evans, Bill [mailto:Bill.Evans@hq.doe.gov]
Sent: Tuesday, November 21, 2006 2:39 PM
To: Tivoli NetView Discussions
Subject: RE: [NV-L] Best method to filter traps from specific
IPaddresses in ruleset
I'd use a QUERY DATABASE for a variable set to identify those four
nodes. I think it's one of the less expensive functions.
You have to identify the capability isOneOfFour to the system so it will
exist in the dataabase.
Edit /usr/OV/fields/C/ovw_fields and add the following
/* Comments */
Field "isOneOfFour" {
Type Boolean;
Flags capability;
} #!/bin/ksh
set -x
Run ovw_fields to get it into the database structure.
Then you have to set that capability for each of your devices:
echo "IP Hostname,isOneOfFour" >/tmp/temp.import
for Item in "One.local.node Two.local.node Three.local.node
Four.local.node"
do
echo "${Item},TRUE" >>/tmp/temp.import
done
/usr/OV/bin/nvdbimport -f /tmp/temp.import
Test for the "isOneOfFOur=TRUE" capability in your rule.
We used to teach this in the "NetView for Unix for Administrators"
course back in Version 4 and 5 timeframe.
Bill Evans
Tivoli NetView support for DOE
570-639-5691 (home)
570-852-9549 (cell)
-----Original Message-----
From: nv-l-bounces@lists.ca.ibm.com
[mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of Van Order, Drew (US
- Hermitage)
Sent:I think the Query Database is one of the less expensive functions.
Tuesday, November 21, 2006 12:41 PM
To: Tivoli NetView Discussions
Subject: [NV-L] Best method to filter traps from specific IP addresses
in ruleset
Hi everyone,
Our customer has been receiving Peribit traps for a few weeks. It
currently looks like this in the ruleset:
Trap Settings node for Peribit trap Enterprise ID (all traps
highlighted) ----> Forward to TEC
Customer has requested that for just one of the traps, we only forward
if it comes from 4 IP addresses, otherwise drop. I figure I will
deselect this trap from the current Trap Settings node, then add a
second Peribit Trap Settings node with just the one trap highlighted.
It's after this step that I am wondering what will be most efficient.
I know I can create a SmartSet with just these 4 IP addresses, but
understand SmartSet queries in rulesets are very expensive, and I don't
want to compromise performance since this is also our TEC_ITS ruleset.
Is there a better way to do this w/o Smart Set query? I don't want to
create a TEC rule for this, I think it's smarter to do it closest to the
trap source.
Thanks!---Drew
Drew Van Order
Information Technology Services
Deloitte Services LP
Tel: +1 615 882 7836
www.deloitte.com
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is
protected by law. If you are not the intended recipient, you should
delete this message.
Any disclosure, copying, or distribution of this message, or the taking
of any action based on it, is strictly prohibited. [v.E.1]
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.430 / Virus Database: 268.14.12/544 - Release Date:
11/21/2006 4:59 PM
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.430 / Virus Database: 268.14.12/544 - Release Date:
11/21/2006 4:59 PM
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to
internal IBM'ers only)
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to
internal IBM'ers only)
|