ICS_Notification Status: Unitialized

Hi Fred,

I believe you found my problem.

I used makeNotification method to access InstanceDisplayName and EventDisplayName inside of the ASL code that used to set the attributes of the Notification.

I know that's another workaround.

Maybe that's the oportunity to do things the right way.

The problem starts because SAM uses INSTANCENAME and EVENTNAME to create de name of the object inside repository.

For some trap events, the varbind related to EVENTNAME is different for the same event.

So Smarts will "think" that those are different events, but they aren't.

Ex:

Trap n1: Varbind1 = source

             Varbind2 = eventcode1

             Varbind3 = "CPU Usage 80%"

Trap n2: Varbind1 = source

             Varbind2 = eventcode1

             Varbind3 = "CPU Usage 85%

Varbind2 is a code and I don't want to see that kind of Information at Notification Log Console.

I use Varbind1 as INSTANCENAME, Varbind2 as EVENTNAME, and Varbind3 as InstanceDisplayName.

I didn't managed to set InstanceDisplayName directely.

Se example code:

...

     ELEMENTCLASSNAME="Host";
     ELEMENTNAME=IPADDRESS;
     INSTANCENAME=V1;
      EVENTNAME=V2;

// And now the workaround:

     icsNotificationFactory = object();
     icsNotificationFactory = object(getInstances("ICS_NotificationFactory")[0]) ? IGNORE;
     ALTER = icsNotificationFactory->makeNotification(CLASSNAME,INSTANCENAME,EVENTNAME);
     if (!ALTER->isNull()) {
         ALTER->InstanceDisplayName=V1;
         ALTER->changed();
     }

...

So the source of the problem is my workaround.

1. How do I remove this workaround?

2. If not possible, can I use "notify()" method (as you sugested) instead of "changed()"?

Tks

Gabriel

Hi Gabriel,

I'm not sure to fully understand your needs, but I see 2 different things:

(1) if you want to rename the "eventcode" to something else, you can use a table in an ASL script attached to this trap, something like:

trap2eventTable = table();

trap2eventTable["eventcode1"] = "eventName1";

...

and then

EVENTNAME = trap2eventTable[V2];

(2) if you want to have the V3 somewhere in the notifcation:

- why don't you use another field (EventText) ?

or

- you may use a DXA (between OI and SAM) for this, testing for the right notifications coming from a trap and changing the instanceDisplayName if this is really what you want.

Note that your code has an issue because you are in an ASL for the trap where the ICS_Notification is not created yet ... so you are creating one which may be not used then ... and you will have a lot of UNITIALIZED ... Processing ICS_Notification inside a custom ASL script for a trap is not easy. You should try to do things at the DXA layer in your case.

HTH,

--Fred

== Monitor your Smarts environment using APG ReportPack for Smarts health ==
Frederic Meunier
Solutions Watch4Net Inc
APG & Smarts InCharge integration
http://www.watch4net.com

Fred,

Thks for your attention.

The main motive to insist in this matther is that I want to receive these notification in the same View of Notification Log Console as other sources.

So if I use UserDefinedField to show EventName, I will have some notifications with EventName at colum "A" and another notifications with EventName at colum "B".

In that example, V3 is the Event, but the varbind that uniquely identifies the Event is V2 (Code).

When I set EVENTNAME = V2, without seting EVENTDISPLAYNAME, Smarts at some point defines EVENTDISPLAYNAME = EVENTNAME. That is what I want to avoid.

I have to identify the trap, its retransmissions and its clear trap as a unique event. I can only achieve this using the eventcode as EVENTNAME. But I don't want to show this info at Notification Log.

I don't know if there is another way to solve this problem instead of seting EventDisplayName.

I need more info about the DXA tips that you told in your last post. I don't understood how can it help me because it's not a matter of SAM retrieving a info from OI.

Thks again.

Gabriel

ps: EventText and UserDefinedFields are reserved for future porpouse

Hi fred,

The problem is finaly solved!

Solution:

I made a copy of trap_mgr_parse.asl and changed it to support "EventDisplayName" and "InstanceDisplayName".

I also reconfigured my TrapMgr Service to use this new RuleSet.

I seted EVENTDISPLAYNAME and INSTANCEDISPLAYNAME at my ASL Script and removed the workaround.

This solution doesn't affect traps received from other sources because I use different Trap Managers listening on diferent ports to each NNM.

Thank You very much.

Best regards.

Gabriel

Hi Gabriel,

I'm happy you solved your issue. Just keep in mind that you will have to "port" your changes to any new updates which will affect the trap receiver ASL script. In my opinion, for what you want to acheive, this was the best solution to use. This should be a basic feature of the trap receiver (you may ask EMC for this as an enhancement).

--Fred

== Monitor your Smarts environment using APG ReportPack for Smarts health ==
Frederic Meunier
Solutions Watch4Net Inc
APG & Smarts InCharge integration
http://www.watch4net.com