On Dec 22, 2008, at 6:13 AM, nixinfo wrote: > We have developed a Perl script to read Windows Event Log messages > and send them as a trap to Zenoss server based on certain criteria. > Everything is working fine, however there are couple of issues. > > Let's say we are monitoring Events generated by application Zeus for > Error messages. The first event generated by Zeus appears fine on > the Zenoss console. If there is another message generated by Zeus > it gets merged with previous message and the count is increased. > Everytime an event occurs it just increases the count on Zenoss > console. Is there a way to show these events as separate messages?
As you can probably see, SNMP traps have their summary set to the OID or decoded OID that comes in. If your script sets the same trap OID for all of these events and uses variable bindings within the trap for specificity you'll need to create an event mapping to pull this specific context out of the trap and use it as the summary instead. Click into the details of one of these events and choose the detail tab. See if the data you want to see as the summary appears here. If it does, note the field name. You'll need to map this event to a class and put something like the following within the transform to use this field as the summary. evt.summary = getattr(evt, "fieldName", "couldn't find fieldName on event.") _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
