Manuals / IBM / Computer Equipment / Network Router

IBM Enterprise Console Windows event log, Windows NT event log, NetWare log file, UNIX log file

Models: Enterprise Console

1 194

Download 194 pages 8.78 Kb

Page 166

Image 166

Windows event log

win_gencds /language/tecad_win.fmt tecad_win.cds

Windows NT event log

nt_gencds /language/tecad_nt.fmt tecad_nt.cds

3.Restart the adapter:

NetWare log file

See “TECADNW4.NLM” on page 61. OS/2 See “Starting the Adapter” on page 80.

UNIX log file

See “Starting the Adapter” on page 101.

Windows event log

See “Starting the Adapter” on page 120.

Windows NT event log

See “Starting the Adapter” on page 135.

154IBM Tivoli Enterprise Console: Adapters Guide

Page 166

Image 166

IBM Enterprise Console manual Windows event log, Windows NT event log, NetWare log file, UNIX log file

Contents

Version Adapters GuideIBM Tivoli Enterprise Console GC32-0668-01Page Version Adapters GuideIBM Tivoli Enterprise Console GC32-0668-01First Edition September Chapter 2. AS/400 Alert Adapter ContentsPreface Chapter 1. Understanding Adaptersiv IBM Tivoli Enterprise Console Adapters Guide Appendix C. Class Definition vi IBM Tivoli Enterprise Console Adapters Guide Who Should Read This Guide PrefaceWhat This Guide Contains Prerequisite Publications PublicationsIBM Tivoli Enterprise Console Library Related PublicationsContacting Customer Support Accessing Publications OnlineProviding Feedback about Publications Conventions Used in this GuideItalics Operating System-dependent Variables and Pathsbold MonospaceHow Events Get Sent to the Event Server Chapter 1. Understanding AdaptersAdapter Overview How Events Get to the Event Server From an EndpointThe TME adapters currently supported for an endpoint are the following How Events Get to the Event Server From a Managed Node Internationalization Support for EventsHow Events Get to the Event Server From a Non-TME Adapter Event Information Event AttributesAttribute Name Stores information describing the rule engines that an event has serverpath listofstringsAdapter Files v datereception v eventhandle v serverhandleCache File File Format Configuration FileFile Location ExampleBufEvtMaxSize AdapterErrorFile=pathAdapterCdsFile=path BufEvtPathFilterCache FilterModegetporttotaltimeoutseconds getporttimeoutsecondsgetporttimeoutusec getporttotaltimeoutusecServerLocation ServerPortTestMode Event Filtering1. Set FilterMode to IN Event Buffer Filtering 1. Set FilterMode to INExample BAROC File2. Set BufferEvents to YES Example Rule FileFormat File ExampleClass Definition Statement File ExampleERROR Error Filemodulename errorlevel outputfile UTILSSELECT Initial FilesKERNEL FETCHAll Adapters Troubleshooting AdaptersAdapter Startup Errors Managed Node AdaptersNon-TME Adapters 22 IBM Tivoli Enterprise Console Adapters GuideQSYS.LIB/QUSRSYS.LIB/CFGALERT.FILE/ALRCFG.MBR Chapter 2. AS/400 Alert AdapterAdapter Files QSYS.LIB/QUSRSYS.LIB/CFGALERT.FILE/ALRCDS.MBR The CDS fileAdapterCdsFile Configuration FileENDTECADP BufEvtPathClass Definition Statement File SELECT Statement ExampleFETCH Statement Example Keywords$ADAPTERHOSTSNANODE Configuring the AS/400 Alert Filters Default Alert FilterPERMANENT, TEMPORARY, or IMPENDING PROBLEM $HOSTNAME $ALERTCDPTStarting the Adapter Integrating with an Existing Alert FilterCRTDTAQ DTAQlibrary/name TYPE*STD MAXLEN592 FORCE*NO SEQ*FIFO SYNOPSIS AuthorizationSTRTECADP DESCRIPTIONStopping the Adapter Comments ENDTECADPContext AuthorizationENDTECADP EVTADPMYCFG OPTION*CNTRLD DELAY60 ExamplesENDTECADP EVTADPALERTADP Default Event Events ListingEvent Class Structure Event ClassEvent Class Default EventSeverity Default Severity Troubleshooting the AS/400 AdapterAlert Type Starting an AS/400 Adapter after an IPL Logging Events in Test ModeTCP/IP Considerations Adding an Autostart Job to QSYSWRKMultiple AS/400 Alert Adapters Changing the AS/400 Startup ProgramQSECOFR Configuration File To create the configuration file, perform the following stepsExamples POSTEMSGContext 38 IBM Tivoli Enterprise Console Adapters GuideQSYS.LIB/QUSRSYS.LIB/CFGMSG.FILE/MSGCFG.MBR Chapter 3. AS/400 Message AdapterAdapter Files QSYS.LIB/QUSRSYS.LIB/CFGMSG.FILE/MSGCDS.MBR The CDS fileJobDescription Configuration FileAdapterCdsFile 40 IBM Tivoli Enterprise Console Adapters GuideSELECT Statement Example MAP Statement ExampleClass Definition Statement File FETCH Statement ExampleDEFER $ADAPTERHOST$ALERTOPTION IMMED$MSGLIBRARYUSED $MSGFILENAME$MSGFILELIBRARY $MSGSEVERITY$SENDUSERPROFILE $SENDPROGRAMNAME$SENDTIME $SUBORIGINStarting the Adapter STRTECADP FlagsAuthorization CommentsStopping the Adapter Chapter 3. AS/400 Message AdapterDELAYseconds AuthorizationENDTECADP EVTADPname *ALL OPTION*CNTRLD *IMMED DELAYseconds ENDTECADPExamples ENDTECADP EVTADPMYAPP OPTION*CNTRLD DELAY60ENDTECADP EVTADPSYSOPR subsource Events ListingEvent Class Structure hostnameTCP/IP Considerations Troubleshooting the AS/400 AdapterLogging Events in Test Mode WRKJOB JOBnameAdding an Autostart Job to QSYSWRK Starting an AS/400 Adapter after an IPLChanging the AS/400 Startup Program Configuration File Using FTP to Execute AS/400 CommandsMultiple AS/400 Message Queues DONE RETURN CHGVAR VAR&CPYR VALUE&CPYR ENDPGM54 IBM Tivoli Enterprise Console Adapters Guide Error File Chapter 4. NetWare Log File AdapterNetWare Log File Adapter Reference Information Adapter FilesSource Prefiltering NetWare EventsConfiguration File EventIdPreFilter Format FilePollInterval PreFilterModenwmsgversion Events ListingEvent Class Structure nwmsgidalertlocus alertclassThe following NetWare events are defined in the BAROC file 60 IBM Tivoli Enterprise Console Adapters GuideTECADNW4.NLM Description tecadnw4.nlmFlags ExamplesTroubleshooting the NetWare Log File Adapter 64 IBM Tivoli Enterprise Console Adapters Guide Reception of OpenView Messages Chapter 5. OpenView AdapterOpenView Driver Determining the OpenView NNM Versionenterprise Incoming Messages FormatEvent Correlation With NNM agent-addrDetermining the OVsnmpEventOpen Filter Value Chapter 5. OpenView AdapterTesting Tools Testing Event Correlation With NNMEvent Correlation Example This trace file is located in $OVLOG/ecs/ecs-instance#/ecsin.evt#Adapter Files HPOVFilter=filter OpenView Event ExampleClass Definition Statement File WellBehavedDaemon$COMMUNITY Object Identifier FileKeywords $ENTERPRISEError File LRF FileStarting and Stopping the Adapter name object identifiersource Events ListingEvent Class Structure subsourceDefault Severity Event Class50462720 Warnings OpenView Traps SNMP TrapsOpenView Traps Node MarginalSegment Marginal Troubleshooting the OpenView Adapter50790402 5079040378 IBM Tivoli Enterprise Console Adapters Guide install.exe Chapter 6. OS/2 AdapterConfiguration File The adapter installation assist executable fileStarting the Adapter Format FileUnmatchLog Event Class Structure Stopping the AdapterEvents Listing source OS2 subsource OS2Troubleshooting the OS/2 Adapter SNMP Driver Server ConfigurationChapter 7. SNMP Adapter Reception of SNMP MessagesClass Definition Statement File SNMP Event ExampleConfiguration File KeywordsStarting and Stopping the Adapter Error FileObject Identifier File $AGENTADDRStopping the Adapter Cold StartWarm Start Events Listingforwardingagent adapterhostHost on which the adapter runs Proxy agent that forwarded the event to the adapterSNMP Traps Generic Traps Rules ListingEnterprise-specific Traps BAROC File Changes Creating a New SNMP Trap Eventv tecadsnmp.baroc v tecadsnmp.cds v tecadsnmp.oid SYNTAX INTEGER 0..4294967295 ACCESS not-accessible Agent-independent Data90 IBM Tivoli Enterprise Console Adapters Guide Page Class Definition Statement File Changes Troubleshooting the SNMP Adapter Object Identifier File Changesc configurationfile 94 IBM Tivoli Enterprise Console Adapters GuideControlling Event Traffic at the Gateway Chapter 8. IBM Tivoli Enterprise Console GatewaysExample 3. Calculate the value for the EventSendThreshold keyword UNIX Worksheets and CalculationsConfiguration File Microsoft WindowsWindows $DBDIR/cache.dat@EventServer#region on managed nodes tec/gatewaycache@EventServer#tmr-centralUNIX /etc/Tivoli/tec/cache@EventServer#region $TIVOLIHOME/tec/$ACTYPE.cache@ EventServer#region on endpointsGatewaySendInterval GatewayTMEAckEnabledGatewayQueueSize MaxGWCacheSizeMegsThe default value is @EventServer Chapter 9. UNIX Log File Adapter Event Server ConfigurationStarting the Adapter Stopping the Adapter Running Multiple UNIX Log File Adaptersinit.tecadlogfile -s start stop AdapterID Adapter Files Configuration Filelogdefault.rls tecadlogfile.cfgClass Definition Statement File Error FileFormat File Events ListingDefault Severity Event ClassEvent Class Default Severity106 IBM Tivoli Enterprise Console Adapters Guide Default Severity Event ClassPrinterPaperJam PrinterDoorOpen Default RulesPrinterPaperOut PrinterTonerLow PrinterOffline PrinterOutputFull PrinterPaperOut PrinterTonerLow PrinterOffline PrinterOutputFullRepeatedLoginFailure RepeatedLoginFailureFrom RootLoginSuccessFrom Troubleshooting the UNIX Log File AdapterLogfileAmd LogfileCron LogfileOserv LogfileDateSet 110 IBM Tivoli Enterprise Console Adapters Guide tecinstlwin.cmd Chapter 10. Windows Event Log AdapterAdapter Files tecadwins.exetecadwin.baroc Configuration FileDEFAULT HostnameIsAdapterHostNumEventsToCatchUp PreFilterLog=lognameEventId=value EventType=valueSource=valueWINEVENTLOGS SpaceReplacementPreFilterMode PreFilterLog=ApplicationSource=re’TEC.*’Prefiltering Windows Log Events EventIdFormat File Jan 15 150619 1998 0 Error N/A ServiceControlManager 7024 \The UPS service terminated with service-specific error SourceApplicationEventsProcessedTimeStamp Registry VariablesApplicationEventsProcessed DirectoryEventsProcessedDNSEventsProcessedTimeStamp DirectoryEventsProcessedTimeStampDNSEventsProcessed FileReplicationEventsProcessedSecurityEventsProcessedTimeStamp Low Memory Registry VariablesTECInstallPath SystemEventsProcessed3. Type in SYSTEM in the Set Login Names dialog Adapter Administrator Roles for Windows1. Select Create Administrators from the Administrators icon Starting the Adaptersubsource Event Class Structuresource NT hostnameNTPrinterWasSet tecadwin Command DESCRIPTION tecadwinSYNOPSIS EXAMPLESTroubleshooting the Windows Event Log Adapter 126 IBM Tivoli Enterprise Console Adapters Guide Chapter 11. Windows NT Event Log Adapter Adapter FilesDEFAULT Configuration FileThe error file tecadnt.errPreFilterLog=lognameEventId=valueEventType=valueSource=value HKEYLOCALMACHINE\SYSTEM\ CurrentControlSet\Services\ TECNTAdapter\NumEventsToCatchUp Chapter 11. Windows NT Event Log AdapterPreFilterMode Prefiltering Windows NT Log EventsSpaceReplacement 130 IBM Tivoli Enterprise Console Adapters GuideSource Format FileEventId EventTypeApplicationEventsProcessed Non-English Format FilesRegistry Variables 132 IBM Tivoli Enterprise Console Adapters GuidePollingInterval TECInstallPathApplicationEventsProcessedTimeStamp SecurityEventsProcessed3. Type in SYSTEM in the Set Login Names dialog Adapter Administrator Roles for Windows NT1. Select Create Administrators from the Administrators icon Low Memory Registry VariablesEvents Listing Starting the AdapterStopping the Adapter Event Class StructureEvent Class Default Severity136 IBM Tivoli Enterprise Console Adapters Guide tecadnt Command Authorization none Arguments tecadnttecadnt.exe -d -c ConfigFile -L none EventLog c ConfigFileTroubleshooting the Windows NT Event Log Adapter 140 IBM Tivoli Enterprise Console Adapters Guide Appendix A. Files Shipped with Adapters 142 IBM Tivoli Enterprise Console Adapters Guide Appendix A. Files Shipped with Adapters 144 IBM Tivoli Enterprise Console Adapters Guide Appendix B. Format File Reference Format File LocationFormat Specifications v %lengthsv %lengths+ Log File Examplev %lengths v %tsucceeded for succeeded for su ’su su ’suon on Windows NT Example MappingsPRINTF statement DEFAULT keywordstring constant LABEL keywordAdditional Mapping Considerations The following list describes how values were assigned NetWare log file Activating Changes Made with a Format FileGenerating a New Class Definition Statement File for a TME Adapter UNIX log fileNetWare log file Windows event logWindows NT event log UNIX log fileFile Format Appendix C. Class Definition Statement File ReferenceOperators SELECT Class Definition Statement File DetailsFETCH Note AS/400 adapters do not support KEY parts in CDS files 1 ATTR=,$TYPE,VALUE=,4 FETCH Statement1$TYPE=4 Example MAPDEFAULT StatementMAP Statement nexpressionObject Identifier to Name Translation name objectidentifierClass Definition Statement File Syntax Diagrams SELECTkeydecl = KEY ’’ kop ’,’ vopval ’’ aop = ’=’ PREFIX SUFFIX EXISTS Page 164 IBM Tivoli Enterprise Console Adapters Guide Notices IBM Corporation 2Z4A/101 11400 Burnet Road Austin, TX 78758 U.S.A Trademarks Notices168 IBM Tivoli Enterprise Console Adapters Guide Glossary Obsolete term forPage Index Special characters 5, 610, 24 CDS file keywords continued Page files continued Page Page TCP/IP continued Page 180 IBM Tivoli Enterprise Console Adapters Guide Page Program Number 5698-TEC Printed in U.S.A GC32-0668-01