DX NetOps

Expand all | Collapse all

Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

Jump to Best Answer

Anon Anon04-06-2017 03:21 PM

  • 1.  Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-05-2017 01:04 PM
      |   view attached

    Hello everyone

     

    In CA Spectrum 10.1.2 and CA SystemEDGE agents 5.9 When a trap "watch logfile" is received and the text contains accents is shown in OneClick Console Events tab as the following image:

     

     

    This is the text matched in log file:

     

    Caused by: java.sql.BatchUpdateException: ORA-00001: restricción única (SIINTEGRA.AK_MUL_BITACORA_INTERFASE) violada

     

    In the AlarmNotifier is shown as follows:

     

    ProbableCause: MONITORED LOG MATCH TRAP RECEIVED

    SYMPTOMS:

    A string satisfying a matching rule was recently written to a monitored log file
    .

    PROBABLE CAUSES:

    The agent sent a trap to SPECTRUM reporting the match.

    RECOMMENDED ACTIONS:

    1) See the event for details of the match.


    EventMessage: - Device linuxdst of type Host_systemEDGE reported that a Log
    MonitorMatch event has occurred. (event [0x01169af7])

    Monitor Index: 1319

    Matched Text: 

    Monitored File: /var/log/esa/alarms.log ----- This is a test log

    Monitor Description: Revisar excepci.n con base de datos  MF2 D1 Batch Procesos Masivos
    Only displaying most recent of 9 event messages.


    ============================================================

     

    Other case:

     

     

     

    Other events without accents in the text are displayed correctly:

     

    I have seen a related topic in the following link

    https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC592830.html 

     

    Note: In my test environment with the same client settings and SetScript file the texts with accents are displayed.

     

    I'd appreciate your help.

    Attachment(s)

    zip
    ALARMRC.alarmrc.zip   543 B 1 version


  • 2.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-05-2017 09:44 PM

    If in your test environment you have the same accented words, but the problem is not reproduced, then something is different in your client side.

    Check the following:

    - $SPECROOT/Notifier/.alarmrc file (SS machine)

    - $SPECROOT/custom/Events/CsEvFormat/Event01169af7 file (OC machine, in case the event  code/message was customized)

    - $SPECROOT/SG-Support/CsEvFormat/Event 01169af7 file (OC machine)



  • 3.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-05-2017 10:11 PM
      |   view attached

    Hi Silvio thanks

     

    Already validate the events in the SS but not yet in the OC.

     

    NOTE: This is a new implementation in Windows Server 2012 R2 and no changes have been made to the events.

     

    Aattached the .alarmrc file.

     

    Thanks you very much

    Attachment(s)

    zip
    ALARMRC.alarmrc.zip   543 B 1 version


  • 4.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-06-2017 09:28 AM

    Try putting the varbind variable between single quotes in the Event Message.

    Matched Text: '{S 17}'

     

     

    And don't forget to copy the $SPECROOT/custom/Events/CsEvFormat/Event01169af7 file from the OC host to the SS machine.



  • 5.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-06-2017 10:53 AM

    Hi Silvio 

    The change was made in the events 0x01169af7 and 0x01169af6

    This is the result.

     

     

     

     

    Thanks



  • 6.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-06-2017 11:01 AM

    Did you copy the Event_01169af7_en_US and Event_01169af6_en_US files to the SpectroSERVER machine?



  • 7.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-06-2017 12:09 PM

    Hi Silvio

     

    Yes 



  • 8.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-06-2017 12:23 PM

    Hi Manuel Garcia,

     

    Are you sure the AlarmNotifier is picking up the correct Event01169af7_en_US file?

    Edit it and change any text. Example: Matched Accented Text: '{S 17}'



  • 9.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-06-2017 03:21 PM

    Hi Silvio

     

    Yes in the SS and OC.

     

     

    Regards



  • 10.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-06-2017 03:39 PM

    Hi Manuel Garcia,

     

    Do you have this entry in the AlarmNotifier log?

    Matched Accented Text:



  • 11.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-06-2017 04:04 PM

    Hi Silvio 

     

    Yes 

     

     

    Regards



  • 12.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-06-2017 05:12 PM

    Hi Manuel Garcia,

     

    If you modified the $SPECROOT/custom/Events/CsEvFormat/Event01169af7_en_US file (on the SpectroSERVER machine) and changed

    from: Matched Text: {S 17}

    to: Matched Accented Text: '{S 17}'

     

    I would expect the following in the AlarmNotifier log file:

    Matched Accented Text: 



  • 13.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-06-2017 08:40 PM

    Hi Silvio

     

    Sorry, I have not been able to do this test.

     

    Otherwise, I think the problem is related to the utf8 encoding because the character (�)  is presented when there are accents in the words.

     

    Why does a diamond with a questionmark in it appear in my HTML? - Stack Overflow 

     

    Regards and thank you very much for your help.



  • 14.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Broadcom Employee
    Posted 04-07-2017 07:03 AM

    Hi Manuel Garcia,

     

    Let me know the result of my last suggestion once you have a chance to test it.



  • 15.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host
    Best Answer

    Broadcom Employee
    Posted 04-13-2017 05:43 AM

    Hello Jose,

     

    If you are facing issues with this still please log a case with support for further investigation.

     

    Regards

     

    Declan



  • 16.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-13-2017 12:18 PM

    Hi Declan thanks

     

    Currently I have the following case 00708247 - AlarmNotifier notification Matched Text parameter does not display information. After so many attempts and tests, it has been decided to reinstall the operating system.

     

    I hope this solves the problem.

     

    Thanks you very much.

     

    Regards Manuel



  • 17.  Re: Spectrum AlarmNotifier does not print text in the field "Matched Text" from SystemEDGE Host

    Posted 04-20-2017 04:23 PM

    Hi everyone 

     

    The solution is in the following link.

     

    CA Spectrum 10 OneClick displays special characters (�)  

     

    Thanks you very much for your help.

     

    Regards Manuel