Hi, I'm trying to solve a problem.
We are trying to monitor a program which sends traps to a Zenoss machine. In the events section of Zenoss all the traps (different) are detected into 1 event, dedupid does this, but the traps are different,. The question is how can i filter on details when i use the magnifying glass of the event, i know it's possible on the fields section and where can i set this filtering. Or how can i disable dedupid for a short time so i can register the event, when that's done, enable dedupid. In the examples you can see that the dedupid, snmp trap, eventClassKey are the same in both examples and that the details differ. Example 1: FIELDS TAB (magnifying glass): Field Value dedupid xxxxxxxx||||3|snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx evid 0a1584dd353add40ffffc95 device xxxxxxxx component eventClass /Unknown eventKey summary snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx message snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx severity 3 eventState 0 eventClassKey 1.3.6.1.4.1.18825.0.1 eventGroup trap stateChange 2007/04/24 08:32:06.000 firstTime 2007/04/23 11:44:00.235 lastTime 2007/04/24 08:32:05.961 count 231 prodState 0 suppid manager zzzzzzzz agent zentrap DeviceClass Location Systems DeviceGroups ipAddress xxxxxxxx facility unknown priority -1 ntevid 0 ownerid clearid DevicePriority 3 DETAILS TAB (magnifying glass): Field Value 1.3.6.1.4.1.18825.1.1.1.805 1900805 1.3.6.1.4.1.18825.1.1.10.805 VRR memory usage is higher than 91% 1.3.6.1.4.1.18825.1.1.11.805 0 1.3.6.1.4.1.18825.1.1.12.805 91 1.3.6.1.4.1.18825.1.1.13.805 0 1.3.6.1.4.1.18825.1.1.14.805 129518901 1.3.6.1.4.1.18825.1.1.2.805 1 1.3.6.1.4.1.18825.1.1.3.805 23/04/2007 12:44:29.731 1.3.6.1.4.1.18825.1.1.4.805 xxxxxxxx 1.3.6.1.4.1.18825.1.1.5.805 3 1.3.6.1.4.1.18825.1.1.6.805 yyyyyyyy 1.3.6.1.4.1.18825.1.1.7.805 1 1.3.6.1.4.1.18825.1.1.8.805 184857935 1.3.6.1.4.1.18825.1.1.9.805 4171 We want to filter on these items in Details: 1.3.6.1.4.1.18825.1.1.10.805 VRR memory usage is higher than 91% 1.3.6.1.4.1.18825.1.1.9.805 4171 Example 2: FIELDS TAB (magnifying glass): Field Value dedupid xxxxxxxx||/Topio||3|snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx evid 0a1584dd3537d82efffffdd device xxxxxxxx component eventClass /Unknown eventKey summary snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx message snmp trap 1.3.6.1.4.1.18825.0.1 from xxxxxxxx severity 3 eventState 0 eventClassKey 1.3.6.1.4.1.18825.0.1 eventGroup trap stateChange 2007/04/20 14:26:41.000 firstTime 2007/04/20 11:22:22.422 lastTime 2007/04/20 14:26:41.457 count 21 prodState 0 suppid manager zzzzzzzz agent zentrap DeviceClass Location Systems DeviceGroups ipAddress xxxxxxxx facility unknown priority -1 ntevid 0 ownerid clearid DevicePriority 3 DETAILS TAB (magnifying glass): Field Value 1.3.6.1.4.1.18825.1.1.1.1 1800001 1.3.6.1.4.1.18825.1.1.10.1 Consistency time halt for more than 3600 seconds 1.3.6.1.4.1.18825.1.1.11.1 0 1.3.6.1.4.1.18825.1.1.12.1 3600 1.3.6.1.4.1.18825.1.1.13.1 0 1.3.6.1.4.1.18825.1.1.14.1 1634242707 1.3.6.1.4.1.18825.1.1.2.1 2 1.3.6.1.4.1.18825.1.1.3.1 20/04/2007 12:23:01.449 1.3.6.1.4.1.18825.1.1.4.1 xxxxxxxx 1.3.6.1.4.1.18825.1.1.5.1 5 1.3.6.1.4.1.18825.1.1.6.1 SESSION_VOLC 1.3.6.1.4.1.18825.1.1.7.1 3 1.3.6.1.4.1.18825.1.1.8.1 184857955 1.3.6.1.4.1.18825.1.1.9.1 4219 We want to filter on these items in Details: 1.3.6.1.4.1.18825.1.1.10.1 Consistency time halt for more than 3600 seconds 1.3.6.1.4.1.18825.1.1.6.1 SESSION_VOLC 1.3.6.1.4.1.18825.1.1.9.1 4219 Can someone give a hint or a advice to solve this. ------------------------ Johan Schuring -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=5889#5889 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
