RE: [NV-L] Ignore events from a specific host

[Greg Keetch <gkeetch@ca.ibm.com>]

A couple of things to note here...

First just a warning to remember that trapd is still receiving these traps, so all you've done is effectively hide them from being seen. If you are indeed being flooded by events from an external source, you are still being flooded and could run into performance problems depending on how many traps you are receiving but no longer able to visualize.

Second thing is that these traps will still be processed by automation (through rules in ESE.automation or for possible TEC forwarding). The decision to log/display/forward events is made after this processing takes place. It's odd the way it works, but if you were to have a logging type of action in a ruleset (like an echo into a file) you would be able to see it.

Really, the best way to deal with a load of traps from a specific source is to get it so they are not sent, or sent to something like an MLM that can be used to keep them from getting to NetView.

Regards,
Greg Keetch
IT Specialist (Advisor), Network Services
Network Management Tools Specialist
Information Technology Services Americas (ITSA), Global Services, IBM Canada

mikemillion2000@comcast.net

mikemillion2000@comcast.net
Sent by: nv-l-bounces@lists.ca.ibm.com

09/14/2007 08:35 AM

Please respond to
Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>

To	Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
cc
Subject	RE: [NV-L] Ignore events from a specific host

Bill, that did the trick!
 
I laughed, because I remembered when I made the change last year to receive events from the host/app.
 
Thanx a million!
 
Mike-
 
-------------- Original message -------------- 
From: "Evans, Bill" <Bill.Evans@hq.doe.gov> 

> I think you can use the Event Configuration tool (or edit the trapd.conf 
> file) to set the trap to "Don't log or display" on the Event Category 
> area and the Event Sources to your device list. 
> 
> I know the first part works at suppressing traps (including their 
> automation) and believe the Event Source will limit the effect to named 
> sources. 
> 
> Bill Evans 
> 
> -----Original Message----- 
> From: nv-l-bounces@lists.ca.ibm.com 
> [mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of 
> mikemillion2000@comcast.net 
> Sent: Friday, September 14, 2007 10:44 AM 
> To: Tivoli NetView Discussions 
> Subject: [NV-L] Ignore events from a specific host 
> 
> Good morn! ing- > Just a quick question. Is there anyway to tell the netview server to 
> ignore/drop events from a specific ip/host? Well, without removing him 
> from the database and map. But then wouldn't the Netview server receive 
> traps and just say that the trap is unknown? 
> Thanx. 
> Mikemillion 
> 
> 
> _______________________________________________ 
> NV-L mailing list 
> NV-L@lists.ca.ibm.com 
> Unsubscribe:NV-L-leave@lists.ca.ibm.com 
> http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
> internal IBM'ers only) _______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to internal IBM'ers only)

_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)