IBM Enterprise Console manual Event Correlation Example

vTo find details about event arrivals for the circuits and streams, use the following command: ecsmgr -stats

vTo turn on tracing to see the OpenView events received, use the following command: ecsmgr -log_events input on

This trace file is located in $OV_LOG/ecs/<ecs-instance#>/ecsin.evt#

vTo turn on tracing to see the OpenView stream events received, use the following command:

ecsmgr -log_events stream <stream-name>on

The trace files for the stream output events are located in $OV_LOG/ecs/<ecs- instance#>/<stream-name>_sout.evt#

The trace files for the discarded stream events are located in $OV_LOG/ecs/<ecs-instance#>/<stream-name>_sdis.evt#

The following example turns on stream event tracing for a stream named default:

ecsmgr -log_events stream default on

vTo turn on tracing to see the OpenView circuit events received, use the following command:

ecsmgr -log_events circuit <circuit-name> on

The trace files for the circuit output events are located in $OV_LOG/ecs/<ecs- instance#>/<circuit-name>_cout.evt#

The trace files for the discarded circuit events are located in $OV_LOG/ecs/<ecs-instance#>/<circuit-name>_cdis.evt#

The following example turns on circuit event tracing for a stream named PairWise:

ecsmgr -log_events circuit PairWise on

Event Correlation Example

The following event passes through circuits named PairWise and ConnectorDown. When the HPOVFilter value passed to OVsnmpEventOpen is .*, the event is

forwarded to the adapter because the stream default is not being used. If the HPOVFilter value is {CORR{default}} .*, you can only see the event in the circuit

discard trace file.

snmptrap <boxname> "1.3.6.1.4.1.11.2.17.1" 146.84.36.175 6 40000084 0 \ 1.3.6.1.4.1.11.2.17.2.1.0 integer 7 \

1.3.6.1.4.1.11.2.17.2.2.0 octetstringascii "snmp trap for connector down"

Note: You must watch the circuit and stream trace files to see when this event is discarded. This event sometimes is sent to the adapter instead. Keep the message text changing slightly so that you can identify a specific event. Also, send multiple events until the discard trace file for the stream default shows the event is discarded, which indicates that the event was not sent to the adapter.

The following event is sent to the adapter when HPOVFilter is set to {CORR{default}} .*:

/opt/OV/bin/ovevent -s Major -c "Error Events" "" \

.1.3.6.1.4.1.11.2.17.1.0.58916872 \

.1.3.6.1.4.1.11.2.17.2.1.0 Integer 14 \

.1.3.6.1.4.1.11.2.17.2.2.0 OctetString "user@host" \

.1.3.6.1.4.1.11.2.17.2.4.0 OctetString "major error message"

Chapter 5. OpenView Adapter 69