Hello Risto,
Thank you very much. It resolved the error but, still I am finding the
following warning message:
Rule in C2.1.01.conf at line 1: Warning - could not find 'snmptrap'
Can you please tell me what this shellcmd indicates.
Regards,
Waseem
-----Original Message-----
From: Risto Vaarandi [mailto:risto.vaara...@seb.ee]
Sent: Tuesday, May 17, 2011 3:27 PM
To: simple-evcorr-users@lists.sourceforge.net
Subject: Re: [Simple-evcorr-users] How to generate OID and make SEC to
communicate with zenoss.
hi Waseem,
please write the 'action' field of the rule as:
action=shellcmd snmptrap -v 2c -c public ZenossIP "" ucdStart OID s "SEC
Alert to ZenOSS"
and see if it works (each SEC action must begin with a keyword that
specifies the action type). You might also want to rewrite 'snmptrap'
with full path if SEC is running as a daemon and snmptrap utility is
residing in some non-standard directory.
hope this helps,
risto
On 05/17/2011 12:51 PM, Waseem Hawaldar wrote:
> Hello Rosto,
> First of all I would like to thank you for your reply.
>
> Detailed technical description:
> I am trying to read some sample file, from the respective VM, were SEC is
> installed. After which I am filtering the contents of the file based on
> filter expression, also called as RegExp in SEC. Now after filtering I am
> writing the action command in SEC as follows:
>
> action=snmptrap -v 2c -c public ZenossIP "" ucdStart OID s "SEC Alert to
> ZenOSS"
>
> Now when I run this sec perl script, I am observing an error message as
> Action Invalid.
>
>
> SEC Config file for your reference:
>
> type=Single
> ptype=RegExp
> pattern=error
> desc=$0
> action=snmptrap -v 2c -c public 192.11.21.1 "" ucdStart
> 1.3.6.1.4.1.2021.251.1 s "SEC Alert to ZenOSS"
>
> My goal is to filter any given input file based on SEC's control expression
> and send the filtered contents to zenoss.
>
> Please suggest me some tips for this problem. Any help will be appreciated.
>
>
>
> Regards,
> Waseem
>
>
>
> -----Original Message-----
> From: Risto Vaarandi [mailto:risto.vaara...@seb.ee]
> Sent: Tuesday, May 17, 2011 3:07 PM
> To: simple-evcorr-users@lists.sourceforge.net
> Subject: Re: [Simple-evcorr-users] How to generate OID and make SEC to
> communicate with zenoss.
>
> On 05/16/2011 01:17 PM, Waseem Hawaldar wrote:
>> Hi ,
>>
>> I have installed both SEC (ver 2.5.2) and zenoss in 2 different VMs. I
>> have tested SEC with simple expression matching and writing the results
>> to file.
>>
>> Now I am trying to make SEC to talk with zenoss so that I can monitor
>> the events through zenoss. I request you to please help me in knowing ,
>> what is the role of OID here and how it can be configured?
>>
>> I would also like to know as to how to configure zenoss.
>>
>> Regards,
>>
>> Waseem
>>
>
> Hmmm... I think not so many readers of this list (including me) might
> have a previous experience with Zenoss, so it might be somewhat hard to
> figure out the essence of the issue. I can only tell you that OID is a
> convention for object naming
> (http://en.wikipedia.org/wiki/Object_identifier) which is extensively
> used by SNMP agents and SNMP command line tools. However, without
> knowing more about your particular setup, it is very hard to guess what
> sort of OID's you are talking about.
> Can you give a precise technical description about how you would like to
> use SEC with Zenoss? Is SEC watching some sort of log file Zenoss is
> producing? Are you currently having a trouble with understanding the
> format of the log file?
> kind regards,
> risto
>
>>
>> ------------------------------------------------------------------------
>>
>> http://www.mindtree.com/email/disclaimer.html
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Achieve unprecedented app performance and reliability
>> What every C/C++ and Fortran developer should know.
>> Learn how Intel has extended the reach of its next-generation tools
>> to help boost performance applications - inlcuding clusters.
>> http://p.sf.net/sfu/intel-dev2devmay
>>
>>
>>
>> _______________________________________________
>> Simple-evcorr-users mailing list
>> Simple-evcorr-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
>
> ------------------------------------------------------------------------------
> Achieve unprecedented app performance and reliability
> What every C/C++ and Fortran developer should know.
> Learn how Intel has extended the reach of its next-generation tools
> to help boost performance applications - inlcuding clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
> ------------------------------------------------------------------------------
> Achieve unprecedented app performance and reliability
> What every C/C++ and Fortran developer should know.
> Learn how Intel has extended the reach of its next-generation tools
> to help boost performance applications - inlcuding clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
