I am using spectrum 10.2 i need your help to figure out an situation i am facing with Event. THE IMG i attached is an event of a CISCO CRS8S Router , It consist of a entSensor Threshold notification.
the thing i want to know is its a Temperature data? secondly if its temperature then its of which instance of router?
third is its an event with by default 0 severity and if i want to change a severity of it to major then i never use it as alarm because it has no clearance and also it appears again and again and severity shows on only first instance.
how can i use it as an alarm (generation and clearance) if its Chassis or Card temperature related..
please guide me about its workaround.
The 0x210aa7 event is based on trap. You Cisco device is sending a trap that CA Spectrum maps as the 0x210aa7 event code.
If you change the Severity from "None" to either Minor, Major, or Critical, you will get an alarm once the CA Spectrum receives the trap.
You will need to engage the Cisco device's administrator if you want to change the threshold that generates the trap. You will also need to check if the device will send a new trap when the threshold is reset so CA Spectrum can clear the alarm.
In the $SPECROOT/SS/CsVendor/Cisco_Router/AlertMap file:
# entSensorThresholdNotification # entSensorThresholdValue126.96.36.199.188.8.131.52.184.108.40.206 0x00210aa7 220.127.116.11.18.104.22.168.22.214.171.124.1.4(1,2)\ # entSensorValue 126.96.36.199.188.8.131.52.184.108.40.206.1.4(3,4)
The Trap OID 220.127.116.11.18.104.22.168.22.214.171.124 is mapped to 0x210aa7 event code.
Please read the following CA Spectrum guide regarding Event Configuration:
Event Configuration - CA Spectrum - 10.3 - CA Technologies Documentation
Similar post at Spectrum community:
Viewing Current Switch Temperature
The problem is that device is not pushing any clearance trap related to this and Secondly the severity is adjusted to major is only visible for first event others are viewed without any severity and need to be clear older event before generating new one its just a notification and has no clearance.
I think there is a need to apply a condition on the temperature value to make its clearance.
Correct, since the device isn't sending the clear trap you will have to either manually clear it or create an event condition rule that automatically clears it after X minutes (use an event pair rule that looks for an event that does not generate, which will trigger another event then have that event clear the initial alarm).
To generate more than 1 alarm, you need to make it unique -- in Event Configuration under the Alarm section is "Alarm Options" select the 'Generate a unique alarm for each event' option.
Here's 2 tech doc references for the auto clearing of the alarm (these are different, just close to the same title):
How can SPECTRUM automatically clear an alarm afte - CA Knowledge