Bryn,
Basically you need to create an event in the event library, associate it
with a device on a map, and set the notification for the device.
>From the console in version 8 to create an event:
Configure/Events Library/Windows Log/New/
The help screens will detail an automated and manual method.
Most of our events are generated by the DBA and the "Source" is SQL Server
but it I leave it blank.
The "Event ID" can be supplied or blank.
The "Type" if known or can be blank.
I use "Match on" to look for strings that my DBA puts into the description
and that triggers who I notify and how.
Associate the event with a device:
In the "Item Properties" for an device on a map select Events/Windows Log/
All the events you configured in the "Events Library" for Windows logs will
be displayed for you to select.
Setting the notification:
In the "Item Properties" for the device select "Notifications"
Select the notification
check the "On Event" box
Select "Select Events"
A box entitled "Active Entries For This Device" shows the event from the
previous step
Check "Only Specific Events"
check the event
There is a knowledge base article explaining that the notification trigger
should be high for SNMP traps to avoid notifications on missed polls. I am
not sure if it relates to "Windows Log" events but I have tested the
notification with the trigger value at 9999 and a single Windows event does
triggers the notification. Version 8 uses Windows WMI and is standard with
Windows 2000. For Windows NT the WMI component needs to be down loaded and
installed on the server.
Carl D.
|---------+------------------------------------->
| | "Cornish, Bryn" |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | pswitch.com |
| | |
| | |
| | 03/25/2003 09:24 AM |
| | Please respond to |
| | WhatsUp_Forum |
| | |
|---------+------------------------------------->
>-------------------------------------------------------------------------------------------------------|
|
|
| To: <[EMAIL PROTECTED]>
|
| cc:
|
| Subject: RE: [WhatsUp Forum] Creating Traps in Win2K?
|
>-------------------------------------------------------------------------------------------------------|
How can this be done? Can you lead me in the right direction?
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: March 25, 2003 8:03 AM
To: [EMAIL PROTECTED]
Subject: RE: [WhatsUp Forum] Creating Traps in Win2K?
If it is in the Event Log, a trap is not needed in version 8. You can have
Event log entries trigger notifications directly without going through the
SNMP trap.
.................Scott, that is excellent detail on trap use and EVNTWIN,
Thank You!
Carl D.
|---------+------------------------------------->
| | Scott Taylor |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | pswitch.com |
| | |
| | |
| | 03/25/2003 08:40 AM |
| | Please respond to |
| | WhatsUp_Forum |
| | |
|---------+------------------------------------->
>-------------------------------------------------------------------------------------------------------|
|
|
| To: "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]> |
| cc:
|
| Subject: RE: [WhatsUp Forum] Creating Traps in Win2K?
|
>-------------------------------------------------------------------------------------------------------|
I believe your best bet is to use EVNTWIN.EXE that comes with 2000 and XP.
This little tool can issue a TRAP on just about anything that can be found
in the event logs. Win 2000 and XP automatically issue a low disk space
warning to the system event log when disk space falls below 10%
availability. A registry setting change can be made to set that value to
whatever you wish.
Here is a quick overview on setting up EVNTWIN for disk space TRAP's.
1) Install SNMP and configure the TRAP destination to WUG
2) Run C:\WINNT\SYSTEM32\EVNTWIN.EXE
3) Click on the CUSTOM radio button
4) Then click the EDIT button (an event source window appears)
5) Now select the + beside SYSTEM log
6) Then find and click on SRV (all Srv events will appear)
7) Click on event ID 2013 (this is disk space low)
8) Click the ADD button and then on OK button
9) Finally click on APPLY
Now you are ready to go. I prefer to generate the TRAP, then go to WhatsUp
and use the OID as shown in the event log for setting up my alerts. I have
included a ZIP file that contains a batch file called BIGFILE.BAT that you
can use to rapidly eat up disk space. It just appends file XXX to file YYY
and then file YYY to XXX over and over. Use CTRL-C to exit this batch
file.
The second file I included called SET_TRAP.BAT will automatically configure
EVNTWIN with about 50 error conditions that I use, including low disk
space.
Remember that you still have to setup SNMP and the TRAP destination before
EVNTWIN will do anything for you. I have some other automated tools and
checklists that I may make available at some point. Good luck...
Scott Taylor
-----Original Message-----
From: James Amann [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 25, 2003 8:23 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [WhatsUp Forum] Creating Traps in Win2K?
Try this app called "Trap Generator" from ncomtech. The link is near the
bottom of the page.
http://www.ncomtech.com/download.htm
>>> [EMAIL PROTECTED] 03/25/03 02:02AM >>>
I have done this in the way that I either change the value from 90% to 20%
or I create a huges file on the drive.
regards
Jens Christensen
Siemens A/S
-----Original Message-----
From: Cornish, Bryn [mailto:[EMAIL PROTECTED]
Sent: 24. marts 2003 18:53
To: [EMAIL PROTECTED]
Subject: [WhatsUp Forum] Creating Traps in Win2K?
I have a small problem. I have to configure my WUG server to recieve SNMP
traps from my TEST server. On the TEST server I have pointed the traps to
go
to the WUG server and I have enabled the WUG server to receive traps from
any server. How do I actually create a Trap on the TEST server to have it
send to WUG server? I have found lots of documentation on how to enable it
but no information on how to specifically create the traps themselves....
I want to send a trap for DRIVE 0(c: drive) on a compaq server.... the MIB
is 1.3.6.1.4.1.232.11.2.4.1.1.5.0
I want the trap to be sent if the % usage goes over 90%
How can this be done? (i know this can be monitored as a service on a
device but management is not interested in that)
Thanks
Bryn Cornish
Junior Security & Infrastructure Analyst
Technology Support & Infrastructure
Division of the Chief Information Officer
Alberta Department of Energy
780 427-7870 FAX 780 422-9522
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
(See attached file: EVNTWIN.ZIP)
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
