DX NetOps

Expand all | Collapse all

CA Spectrum Event correlation

  • 1.  CA Spectrum Event correlation

    Posted 03-26-2019 10:15 AM

    Have to match one condition base on the events which is receiving the from device

     

    "If the Event message content the message “Serial1” in the ifDescr  variable generate the new events , can you help what event rule need set the event correlation?

     

    Event which is receiving from the devices 

     

    A(n) {t} device, named {m}, has detected a Communication Link Down. ifIndex = {I 1}, ifAdminStatus = {T ifAdminStatus 5}, ifOperStatus = {T ifOperStatus 6}, ifDescr = {S 3}, ifType = {S 4}.

     

    Additional Variables:

    sysObjectID = {o 7}

    sysName = {S 8}

    locIfReason = {S 9}

    ifReasonForStatusCes = {T ContIFReasForStat 10}

    ifPhysLocationCes = {T ContIFPhysLoc 11}

    ifPhysRelPosCes = {I 12}

    ifIpAddrCes = {O 13}

    ifNameCes = {S 14}

    ifTunnelRemoteIpAddrCes = {O 15}

    ifName = {S 16}

    ifAlias = {S 17}

    usdSnmpTrapTrapSeverity = {T UsdTrapTrapSeverity 18}

     

    A(n) Rtr_Cisco device, named SCB_MLY_WSI_VR01.SCB.com, has detected a Communication Link Down. ifIndex = 97, ifAdminStatus = , ifOperStatus = , ifDescr = Serial1/1:28, ifType = 22.  Additional Variables:

     

    {S 3}



  • 2.  Re: CA Spectrum Event correlation

    Posted 04-12-2019 02:08 PM

    I recommend using an Event Condition rule using a regular expression looking for Serial1 in event variable 3:

     

     

    Joe