Hello again,
I solved half the problem....
First, I created a table in the DB that contain the codes and the text...
then i added this into the alarm enrichment in the nas.cfg:
<enrichment-source>
<cmdbs>
<mqCode>
active = true
connection_url = jdbc:sqlserver://172.21.2.121:1433;DatabaseName=CA_UIM
user = uimadmin
password = IwkkWLy97XykOxygVqH8IA==_encrypted
query = select ibmMqCodingScheme,channelStatus from Shob_MqChannelCodes where ibmMqCodingScheme = CAST(? AS DECIMAL(10, 0))
population_query = select ibmMqCodingScheme,channelStatus from Shob_MqChannelCodes
</mqCode>
</cmdbs>
</enrichment-source>
<enrichment-rules>
exclusive_enrichment = no
<2>
match_alarm_field = prid
match_alarm_regexp = (websphere_mq)
use_enricher = mqCode
lookup_by_alarm_field = udata.values.value
lookup_by_regexp =
<overwrite-rules>
udata.custom_2 = AMIT
udata.custom_1 = Enrich MQ: [cmdb.channelStatus]
</overwrite-rules>
</2>
</enrichment-rules>
<routing-rules>
exclusive_routing = no
<1>
active = yes
post_subject = alarm2
condition = true
</1>
<2>
active = yes
post_subject = /setup/storm_subject
condition = true
</2>
</routing-rules>
<flood-protection>
routing_rules_during_flood = 2
routing_rules_no_flood = 1
</flood-protection>
this basically takes the value from the original alarm, checks it against the sql with the list of codes and then writes it to custom_1.
The last thing it tried it changing the message of the alarm so i did this:
<overwrite-rules>
udata.message = [udata.message] - [cmdb.channelStatus]
udata.custom_1 = Enrich MQ: [cmdb.channelStatus]
</overwrite-rules>
but this doesn't work. it appears that in the overwrite-rules you are only able to get data from cmdb.x and cannot get any access to udata... - (am i correct ??)
any way, the message said: [udata.message] - retrying
any suggestions?
Thanks,
Amit,