So it means alertMap file passing trap varbind to spectrum variable 0.
Change {v 1} to {v 0} and reload the event config files.
From: Casebere, Scott [mailto:[email protected]]
Sent: Friday, October 09, 2009 4:39 PM
To: Lalit Tyagi; spectrum
Subject: RE: [spectrum] Please help with Event Disp file
I must be making a rookie mistake somewhere. All the alarm events are passing
though and not matching. I went back and created a new set of events and
alarms. Also, only the {S 0} is getting passed; I changed the {v 1} to {s 0}
but had no luck.
0xccccccc0 E 20 R Aprisma.EventCondition, \
"regexp ( {v 1}, {S \"bad\"})", "0xccccccc1 -:-", \
"regexp ( {v 1}, {S \"good\"})", "0xccccccc2 -:-", \
"default", "0xccccccc3 -:-"
0xccccccc1 E 0 A 3,0xccccccc1,U
0xccccccc2 E 0 A 3,0xccccccc2,U
0xccccccc3 E 0
Thanks,
Scott Casebere
PRC NOC
Network Engineer II
500 North Central Expressway
Suite 266
Plano, TX 75074
M 972.955.1542
O 954.838.4109
-----Original Message-----
From: Lalit Tyagi [mailto:[email protected]]
Sent: Friday, October 09, 2009 1:22 PM
To: Casebere, Scott; spectrum
Subject: RE: Please help with Event Disp file
0xccc E 20 R Aprisma.EventCondition, \
"regexp ( {v 1}, {S \"bad\"})", "0xcc1 -:-", \
"regexp ( {v 1}, {S \"good\"})", "0xcc2 -:-", \
"default", "0xcc3 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
-----Original Message-----
From: Casebere, Scott [mailto:[email protected]]
Sent: Friday, October 09, 2009 1:19 PM
To: spectrum
Subject: [spectrum] Please help with Event Disp file
If anyone has the time I would really appreciate some help getting my
syntax right. We have Events being created from a pop3 mailbox and
handed over to spectrum. I would like to take the string being passed
along from these and have different alarms created. Right now I'm just
trying to do a basic match of "good" and "bad". I know my below examples
are wrong but maybe it gives someone an idea of what I'm going for?
Event ccc is created
if "good" is in event then create Event cc1, which creates Alarm cc1
if "bad" is in event then create cc2, which creates Alarm cc2
if anything else then do nothing.
0xccc R Aprisma.EventCondition, \
"{ v 1 } == { S \"bad\" }", "0xcc1 -:-", \
"{ v 1 } == { S \"good\" }", "0xcc2 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
0xccc R CA.EventCondition, "(exists({S \"bad\"}))" , "0xcc2
-:-","(exists({S \"good\"}))" , "0xcc1 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
Thanks,
Scott Casebere
PRC NOC
Network Engineer II
500 North Central Expressway
Suite 266
Plano, TX 75074
M 972.955.1542
O 954.838.4109
---
To unsubscribe from spectrum, send email to
[email protected]<mailto:[email protected]> with the body: unsubscribe spectrum
[email protected]<mailto:[email protected]>
----------------------------------------
This message is intended exclusively for the individual(s) or entity to
which it is addressed. It may contain information that is proprietary,
privileged or confidential or otherwise legally exempt from disclosure.
If you are not the named addressee, you are not authorized to read,
print, retain, copy or disseminate this message or any part of it.
If you have received this message in error, please notify the sender
immediately by e-mail and delete all copies of the message.
Thanks,
Scott Casebere
PRC NOC
Network Engineer II
500 North Central Expressway
Suite 266
Plano, TX 75074
M 972.955.1542
O 954.838.4109
-----Original Message-----
From: Lalit Tyagi [mailto:[email protected]]
Sent: Friday, October 09, 2009 1:22 PM
To: spectrum
Subject: RE:[spectrum] Please help with Event Disp file
0xccc E 20 R Aprisma.EventCondition, \
"regexp ( {v 1}, {S \"bad\"})", "0xcc1 -:-", \
"regexp ( {v 1}, {S \"good\"})", "0xcc2 -:-", \
"default", "0xcc3 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
-----Original Message-----
From: Casebere, Scott [mailto:[email protected]]
Sent: Friday, October 09, 2009 1:19 PM
To: spectrum
Subject: [spectrum] Please help with Event Disp file
If anyone has the time I would really appreciate some help getting my
syntax right. We have Events being created from a pop3 mailbox and
handed over to spectrum. I would like to take the string being passed
along from these and have different alarms created. Right now I'm just
trying to do a basic match of "good" and "bad". I know my below examples
are wrong but maybe it gives someone an idea of what I'm going for?
Event ccc is created
if "good" is in event then create Event cc1, which creates Alarm cc1
if "bad" is in event then create cc2, which creates Alarm cc2
if anything else then do nothing.
0xccc R Aprisma.EventCondition, \
"{ v 1 } == { S \"bad\" }", "0xcc1 -:-", \
"{ v 1 } == { S \"good\" }", "0xcc2 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
0xccc R CA.EventCondition, "(exists({S \"bad\"}))" , "0xcc2
-:-","(exists({S \"good\"}))" , "0xcc1 -:-"
0xcc1 E 0 A 2,0xcc1,U
0xcc2 E 0 A 2,0xcc2,U
Thanks,
Scott Casebere
PRC NOC
Network Engineer II
500 North Central Expressway
Suite 266
Plano, TX 75074
M 972.955.1542
O 954.838.4109
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
----------------------------------------
This message is intended exclusively for the individual(s) or entity to
which it is addressed. It may contain information that is proprietary,
privileged or confidential or otherwise legally exempt from disclosure.
If you are not the named addressee, you are not authorized to read,
print, retain, copy or disseminate this message or any part of it.
If you have received this message in error, please notify the sender
immediately by e-mail and delete all copies of the message.
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
----------------------------------------
This message is intended exclusively for the individual(s) or entity to
which it is addressed. It may contain information that is proprietary,
privileged or confidential or otherwise legally exempt from disclosure.
If you are not the named addressee, you are not authorized to read,
print, retain, copy or disseminate this message or any part of it.
If you have received this message in error, please notify the sender
immediately by e-mail and delete all copies of the message.
---
To unsubscribe from spectrum, send email to [email protected] with the body:
unsubscribe spectrum [email protected]
