hi Waseem, please write the 'action' field of the rule as: action=shellcmd snmptrap -v 2c -c public ZenossIP "" ucdStart OID s "SEC Alert to ZenOSS"
and see if it works (each SEC action must begin with a keyword that specifies the action type). You might also want to rewrite 'snmptrap' with full path if SEC is running as a daemon and snmptrap utility is residing in some non-standard directory. hope this helps, risto On 05/17/2011 12:51 PM, Waseem Hawaldar wrote: > Hello Rosto, > First of all I would like to thank you for your reply. > > Detailed technical description: > I am trying to read some sample file, from the respective VM, were SEC is > installed. After which I am filtering the contents of the file based on > filter expression, also called as RegExp in SEC. Now after filtering I am > writing the action command in SEC as follows: > > action=snmptrap -v 2c -c public ZenossIP "" ucdStart OID s "SEC Alert to > ZenOSS" > > Now when I run this sec perl script, I am observing an error message as > Action Invalid. > > > SEC Config file for your reference: > > type=Single > ptype=RegExp > pattern=error > desc=$0 > action=snmptrap -v 2c -c public 192.11.21.1 "" ucdStart > 1.3.6.1.4.1.2021.251.1 s "SEC Alert to ZenOSS" > > My goal is to filter any given input file based on SEC's control expression > and send the filtered contents to zenoss. > > Please suggest me some tips for this problem. Any help will be appreciated. > > > > Regards, > Waseem > > > > -----Original Message----- > From: Risto Vaarandi [mailto:risto.vaara...@seb.ee] > Sent: Tuesday, May 17, 2011 3:07 PM > To: simple-evcorr-users@lists.sourceforge.net > Subject: Re: [Simple-evcorr-users] How to generate OID and make SEC to > communicate with zenoss. > > On 05/16/2011 01:17 PM, Waseem Hawaldar wrote: >> Hi , >> >> I have installed both SEC (ver 2.5.2) and zenoss in 2 different VMs. I >> have tested SEC with simple expression matching and writing the results >> to file. >> >> Now I am trying to make SEC to talk with zenoss so that I can monitor >> the events through zenoss. I request you to please help me in knowing , >> what is the role of OID here and how it can be configured? >> >> I would also like to know as to how to configure zenoss. >> >> Regards, >> >> Waseem >> > > Hmmm... I think not so many readers of this list (including me) might > have a previous experience with Zenoss, so it might be somewhat hard to > figure out the essence of the issue. I can only tell you that OID is a > convention for object naming > (http://en.wikipedia.org/wiki/Object_identifier) which is extensively > used by SNMP agents and SNMP command line tools. However, without > knowing more about your particular setup, it is very hard to guess what > sort of OID's you are talking about. > Can you give a precise technical description about how you would like to > use SEC with Zenoss? Is SEC watching some sort of log file Zenoss is > producing? Are you currently having a trouble with understanding the > format of the log file? > kind regards, > risto > >> >> ------------------------------------------------------------------------ >> >> http://www.mindtree.com/email/disclaimer.html >> >> >> >> ------------------------------------------------------------------------------ >> Achieve unprecedented app performance and reliability >> What every C/C++ and Fortran developer should know. >> Learn how Intel has extended the reach of its next-generation tools >> to help boost performance applications - inlcuding clusters. >> http://p.sf.net/sfu/intel-dev2devmay >> >> >> >> _______________________________________________ >> Simple-evcorr-users mailing list >> Simple-evcorr-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > > ------------------------------------------------------------------------------ > Achieve unprecedented app performance and reliability > What every C/C++ and Fortran developer should know. > Learn how Intel has extended the reach of its next-generation tools > to help boost performance applications - inlcuding clusters. > http://p.sf.net/sfu/intel-dev2devmay > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
