I am capturing the field "IfAlias" for the alarms from snmpcollector. This field I need to place on the alarms of snmpcollector
The query that I am used for capturing IfAlias is ---->
On this query I hope capture cmd.dev.name = source and S_QOS_DATA.target = Interface to place on the alarm snmpcollector the IfAlias
This is the field (udata.values.source) for find the source:
And this is the field (udata.values.target) for find the interface:
And I need add on the same rule the lookup for interface, because the search needing source and the interface
I have on the nas and alarm_enrichment for get the source ---->
How can I add to the find the "source" and the "target" with this look up, in the same rule?
Can you help me with this ? I know that you wrote an article of this procedure. Check out 'Use 2 lookup_by_alarm_field nas: alarm_enrichment rule' in CA Communities.
Please open a support case and ask for it to be assigned to me.
Thanks for you help Stephen, this is the number ticket 01331487