have a look at the concord eventdisp file. It has a good example of event
filtering based on type and varbind values.
e.g.
# netHealthException - events start at 0x00011010, clear events start at
0x00011100
0x00011001 R Aprisma.EventCondition,\
"{v 102} == {S \"Utilization Health Index\"}", "0x00011010
102-103:102-103,21-22:21-22",\
"{v 102} == {S \"Collision Health Index\"}", "0x00011011
102-103:102-103,21-22:21-22",\
"{v 102} == {S \"Error Health Index\"}", "0x00011012
102-103:102-103,21-22:21-22",\
"{v 102} == {S \"Soft Error Health Index\"}", "0x00011013
102-103:102-103,21-22:21-22",\
etc....
This is in $SPECROOT/SS/CsVendor/Concord
Have fun...
__________________________________________
Patrick Hopgood
Consultant
________________________________
From: Casebere, Scott [mailto:[EMAIL PROTECTED]
Sent: Tue 02-Dec-08 9:49 AM
To: spectrum
Subject: [spectrum] Events being filtered by matching Varbinds?
Does anyone have an EventDisp file that I can reference for the correct syntax
to filter events by matching a varbind string? We have one system sending
thousands of traps and I would like to only show about 10 of the possible
alarms by matching the card type in varbind 5. I figured if I could match the
alarm type (maj,min,info) with the matching string (card type) listed in v5 I
would be good but I can not get the alarm to filter correctly. I can't find an
example of this being done anywhere. My last failed attempt looked like this:
0xfffff001 R Aprisma.EventCondition, \
"{ v 5 } == { S \"FIBER-LK\" }, "0xfffff009 -:-", \
"{ v 5 } == { S \"EXP-INTF\" }, "0xfffff009 -:-", \
"{ v 5 } == { S \"IPMEDPRO\" }, "0xfffff009 -:-", \
"{ v 5 } == { S \"SYS-LINK\" }, "0xfffff009 -:-", \
"{ v 5 } == { S \"SNI-BD\" }, "0xfffff009 -:-", \
Thanks for any help.
Thanks,
Scott
* --To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with
the body: unsubscribe spectrum [EMAIL PROTECTED]
---
To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body:
unsubscribe spectrum [EMAIL PROTECTED]
