I just wanted to thank everyone in the group for all the help. Not sure
I would have figured out my earlier problem without the assistance. I
finally have my events being filtered by the incoming varbind data
though. Turning on the alarm debug out in Spectrum helped a lot as well
as switching to Textpad to edit my files (had extra tabs in the front on
my eventdisp). The final syntax looked like the following.
0xfffff001 R Aprisma.EventCondition, \
"{ v 5 } == { S \"FIBER-LK\" }", "0xfffff009 -:-", \
"{ v 5 } == { S \"EXP-INTF\" }", "0xfffff009 -:-", \
"{ v 5 } == { S \"IPMEDPRO\" }", "0xfffff009 -:-", \
"{ v 5 } == { S \"SYS-LINK\" }", "0xfffff009 -:-", \
"{ v 5 } == { S \"SNI-BD\" }", "0xfffff009 -:-", \
"{ v 5 } == { S \"login\" }", "0xfffff009 -:-"
Andrea also had several other suggestions for condensing the condition
that I'm going to go back and play with some more now.
Thanks again everyone.
Scott
-----Original Message-----
From: Mandrako [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 02, 2008 10:41 AM
To: Casebere, Scott
Subject: Re: [spectrum] Events being filtered by matching Varbinds?
Hi Scott,
I have checked better your EventDisp and I tried to fix something.
- the " (as well as cliff said in its response)
- there is not the configuration of 0xffff009 event
- you can use the "or" condition with the "|" symbol
then you can use this syntax in the EventDisp:
*0xfffff001 R Aprisma.EventCondition, "{VARDATA 5} == {
S\"FIBER-LK|EXP-INTF|IPMEDPRO|SYS-LINKSNI-BD\" }", "0xfffff009 -:-"
0xfffff009 E 20 A 3, **to defined **
0xfffff002 E 20 A 3,0xffffffeb
0xfffff003 E 20 A 3,0xffffffea
0xfffff004 E 20 A 3,0xffffffe9*
in this case only major alarms are filtered (you know?).
You can also try my first solution. We have often used the "regexp"
following the CA support, and their work.
Good Job
Andrea
p.s.: sorry for my bad English
Casebere, Scott ha scritto:
> Thanks Andrea,
>
> This actually helps a lot since you appear to be doing the same thing.
> I'm very new to creating alarms so I'm just trying to get everything
> straight. I made an AlertMap file for the Avaya traps and then an
> EventDisp, pcause and event file. I was able to successfully get the
> traps in but not filter them. I'm going to try your suggestion and see
> if I can get this to work. I appreciate the help. I'll let you know
how
> it turns out.
>
> Thanks,
>
> Scott Casebere
>
> PRC
>
> Network Operations
>
> Network Engineer II
>
> Information Technology
>
> 500 North Central Expressway
>
> Suite 231
> Plano, TX 75074
>
> M 972.955.1542
>
> O 954-838-4109
>
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 02, 2008 8:10 AM
> To: spectrum
> Subject: re:[spectrum] Events being filtered by matching Varbinds?
>
> Hi Scott,
>
> We have the same problems with Avaya FPM ;) and we have applied a
filter
> like this:
>
> 0xfffff001 R { 5 } CA.EventCondition, "regexp({VARDATA
> 5},{S\"SYS-LINK|MG-DS1|UDS1-BD|ISDN-TRK|ISDN-PLK\"})", "0xfffff009
-:-"
>
> this is the EventDisp file in the directory
> SPECTRUM$\SS\CsVendor\DEFAULT
>
> I think that your filter is correct but which files you've changed ???
>
> Regards,
> Andrea
> ---
> To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the
> body: unsubscribe spectrum [EMAIL PROTECTED]
>
---
To unsubscribe from spectrum, send email to [EMAIL PROTECTED] with the body:
unsubscribe spectrum [EMAIL PROTECTED]
