CAPC - THRESHOLD - cisco ietf natv1

[Valeria Cunha]

Hello CA Team,

I would like to know how can I could create the threshold when I have more than 200000 connections or how could use the percent of baseline because I've already created the rule and it doesn't work it,as you can see below:

Moreover I've done this threshold based on its connections and it doesn't work too:

This metric I've created on ca performance server to count the nat's entries as you can see below:



thank you,

Valéria

[Steve Crowl]

HI Valéria,

I apologize in advance if you have already done this: did you apply Firewall_NAT as the group for the threshold profile?

[Jeffrey Pinard]

In addition, to making sure you have a group(s) associated to the profile, you could plot the value and the baseline average for the metric.

You'll want to also check the metric family definition.  Did you define the BaselineDefinitions in your custom metric family?  And also tag the metrics with <Baseline>true</Baseline> ?   If you don't, you can't use % of Baseline comparison.

As for the 200000 comparison, that would seem more like maybe group assignment issue.  And check that the group contains the components or devices.  Is the custom MF device or component level?  It will determine whether your group needs device or components in it.

[Valeria Cunha]

Hello Jeffrey,

How can I change the BaselineDefinitions? 
When I put the <Baseline>true</Baseline> here I get this message below:


In addition, I've added the MF here, but I don't understand because it doesn't work with hit the 200000 connections:

<?xml version="1.0" encoding="UTF-8"?>
<!--Auto-generated by the type catalog local manager.-->
<DataModel namespace="http://im.ca.com/certifications/snmp" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="SNMPCertificationFacet.xsd">
<Author>Custom</Author>
<Version>1.0</Version>
<FacetType name="1709280843_CISCO_IETF_NAT_MIB" descriptorClass="com.ca.im.core.datamodel.certs.CertificationFacetDescriptorImpl">
<Documentation>Count Nat Entries</Documentation>
<FacetOf namespace="http://im.ca.com/core" name="Item" />
<DisplayName>ciscoietfnatv1</DisplayName>
<MIB>CISCO-IETF-NAT-MIB</MIB>
<Protocol>SNMP</Protocol>
<ParentNodeList>
<ParentNode>1.3.6.1.4.1.9.10.77.1.2</ParentNode>
</ParentNodeList>
<Attribute name="cnatAddrBindNumberOfEntries" external="true" type="Long">
<Documentation>"This object maintains a count of the number of entries that currently exist in the cnatAddrBindTable."</Documentation>
<Source>1.3.6.1.4.1.9.10.77.1.2.1.0</Source>
<IsIndex>false</IsIndex>
<IsKey>true</IsKey>
<NeedsDelta>false</NeedsDelta>
</Attribute>
<Attribute name="cnatAddrPortBindNumberOfEntries" external="true" type="Long">
<Documentation>"This object maintains a count of the number of entries that currently exist in the cnatAddrPortBindTable."</Documentation>
<Source>1.3.6.1.4.1.9.10.77.1.2.3.0</Source>
<IsIndex>false</IsIndex>
<IsKey>false</IsKey>
<NeedsDelta>false</NeedsDelta>
</Attribute>
<Expressions>
<ExpressionGroup destCert="{http://im.ca.com/normalizer}ciscoietfnatInf">
<Expression destAttr="Names">"RAS-activity"</Expression>
<Expression destAttr="Descriptions">RAS-activity</Expression>
<Expression destAttr="Indexes">1</Expression>
<Expression destAttr="CountNatEntries">cnatAddrBindNumberOfEntries</Expression>
</ExpressionGroup>
</Expressions>
</FacetType>
</DataModel>

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------


<?xml version="1.0" encoding="UTF-8"?>
<!--Auto-generated by the type catalog local manager.-->
<DataModel namespace="http://im.ca.com/normalizer" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="IMDBCertificationFacet.xsd">
<Author>CA</Author>
<Version>1.4</Version>
<FacetType name="ciscoietfnatInf" descriptorClass="com.ca.im.core.datamodel.certs.NormalizedFacetDescriptorImpl">
<Documentation>cisco ietf natv1</Documentation>
<FacetOf namespace="http://im.ca.com/core" name="Item" />
<DisplayName>cisco ietf natv1</DisplayName>
<TableName>NRM_CISCO_IETF_NATV1</TableName>
<Protocol>IMDB</Protocol>
<Normalized>true</Normalized>
<ComponentFacets>
<Facet>{http://im.ca.com/inventory}Device</Facet>
</ComponentFacets>
<AttributeGroup name="ciscoietfnatv1" external="true" list="true">
<Documentation />
<Attribute name="CountNatEntries" type="Long">
<Documentation>Count Nat Entries</Documentation>
<IsDbColumn>true</IsDbColumn>
<Baseline>false</Baseline>
<RollupExpression />
<Minimum>true</Minimum>
<Maximum>true</Maximum>
<RollupStrategy>Avg</RollupStrategy>
<StandardDeviation>true</StandardDeviation>
<Variance>false</Variance>
<Percentile>0</Percentile>
<Percentile2>0</Percentile2>
<Percentile3>0</Percentile3>
<ProjectionPercentile>0</ProjectionPercentile>
<Polled>true</Polled>
</Attribute>
<Attribute name="Descriptions" type="String">
<Documentation />
</Attribute>
<Attribute name="Indexes" type="ObjectID">
<Documentation />
</Attribute>
<Attribute name="Names" type="String">
<Documentation />
</Attribute>
</AttributeGroup>
<Attribute name="SourceFacetTypes" cached="true" list="true" persistent="true" type="QName">
<Documentation />
</Attribute>
<Expressions>
<ExpressionGroup destCert="{http://im.ca.com/inventory}DeviceComponent" name="DeviceComponent">
<Expression destAttr="IndexList">Indexes</Expression>
</ExpressionGroup>
<ExpressionGroup destCert="{http://im.ca.com/core}Item" name="Item">
<Expression destAttr="Name">Names</Expression>
<Expression destAttr="Description">Descriptions</Expression>
</ExpressionGroup>
</Expressions>
</FacetType>
</DataModel>

thank you,

Valéria

[Valeria Cunha]

Hello Jeffrey,


The MF is based on Device as you can see and below:


thank you,

Valéria

[Jeffrey Pinard]

First, when making changes to custom MF XML, you need to use the entire XML, not just a piece you wish to update.

<?xml version="1.0" encoding="UTF-8"?>
...
<Attribute name="CountNatEntries" type="Long">
<Documentation>Count Nat Entries</Documentation>
<IsDbColumn>true</IsDbColumn>
<Baseline>true</Baseline>
<RollupExpression />
<Minimum>true</Minimum>
<Maximum>true</Maximum>
<RollupStrategy>Avg</RollupStrategy>
<StandardDeviation>true</StandardDeviation>
<Variance>false</Variance>
<Percentile>0</Percentile>
<Percentile2>0</Percentile2>
<Percentile3>0</Percentile3>
<ProjectionPercentile>0</ProjectionPercentile>
<Polled>true</Polled>
</Attribute>
...

Next, remove this section from MF XML.  Device is not a component facet:

<ComponentFacets>
<Facet>{http://im.ca.com/inventory}Device</Facet>
</ComponentFacets>

Next in your full MF XML, you need to define the 2 baselines to create.  Add this just before the <Expressions>

<BaselineDefinitions>
<Baseline name="HourlyBaseline">
<ID>1</ID>
<PerformanceMetric>CountNatEntries</PerformanceMetric>
<Period>1 Hour</Period>
<Window>30 Days</Window>
<StartDate>0</StartDate>
<EndDate>0</EndDate>
<DaysOfWeek>0</DaysOfWeek>
</Baseline>
<Baseline name="DailyBaseline">
<ID>2</ID>
<PerformanceMetric>CountNatEntries</PerformanceMetric>
<Period>1 Day</Period>
<ProjectionInterval>0</ProjectionInterval>
<ProjectionInterval2>0</ProjectionInterval2>
<ProjectionInterval3>0</ProjectionInterval3>
<Window>90 Days</Window>
<StartDate>0</StartDate>
<EndDate>0</EndDate>
<DaysOfWeek>0</DaysOfWeek>
</Baseline>
</BaselineDefinitions>

Then you PUT the entire XML, and it should update the MF definition, and will start making baselines every hour.  It may take a couple days to get some good baselines.  And will improve of the next 12 weeks.

Note: in future, use Author of Custom for custom MF/VC.  They get put into a diff directory on disk that is not touched during upgrade.  CA should only be used for OOTB XML definitions.

But still not sure why no events for fixed values.  Wonder if related to the ComponentFacets having Device.

[Valeria Cunha]

Hello Jeffrey,

I really appreciate your help and In the meantime I've created the 2 baselines as you told me,but I couldn't change the face name and I can't remove this tag because this tag is important and must have on MF XML file :<ComponentFacets>
<Facet>{http://im.ca.com/inventory}Device</Facet>
</ComponentFacets>

I was thinking and you could be right about the name Device. on ComponentFacets,maybe it could be the problem to get the fixed values.
The other problem that I have here is about the correct name that I need to put on face name,but so many times I've tried to change this name and unfortunately I didn't have the success and below I always got this message:


thank you,

Valéria

[Valeria Cunha]

Hello Jeffrey,

Unfortunately, the baseline that I've created is crashing the CA Performance Center and I have to disable it.
I would like to know if I have to create another MF with new name using <ComponentFacets> because I couldn't change the name Device as I told before and I so many time I tried to choose lof of different types of names like 

<ComponentFacets>

            <Facet>{http://im.ca.com/inventory}ciscoIetfNat</Facet>

        </ComponentFacets>

------------------------------------------------------------------------------------------------------------------------------------------------------------------------

<ComponentFacets>

            <Facet>{http://im.ca.com/inventory}CiscoIetfNat</Facet>

        </ComponentFacets>

all option didn't it work and get the same message:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<?xml-stylesheet type='text/xsl' href='/typecatalog/TCWebServiceStatus.xsl'?>

<TCWebServiceStatus>

    <statusCode>406</statusCode>

    <statusMessage>The ComponentFacets tag contains an **** Facet name. Correct the tag and try again.</statusMessage>

    <errorText>cisco ietf natv1</errorText>

    <errorLine>14</errorLine>

    <statusMessageTag>com.ca.im.item.ws.impl.TypeCatalogWebServiceEndPointImpl.mf.invalidComponentFacetName</statusMessageTag>

    <l10nprops>

        <!-- Localization properties for building translated status page -->

        <title>Type Catalog Web Service Status</title>

        <code>Status code</code>

        <message>Message</message>

    </l10nprops>

</TCWebServiceStatus>

In addition,I've attached here the MF  and I would like if possible which is wrong that I can't get the fixed values as threshold:

<?xml version="1.0" encoding="UTF-8"?>

<!--Auto-generated by the type catalog local manager.-->

<DataModel namespace="http://im.ca.com/normalizer" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="IMDBCertificationFacet.xsd">

    <Author>CA</Author>

    <Version>1.4</Version>

    <FacetType name="ciscoietfnatInf" descriptorClass="com.ca.im.core.datamodel.certs.NormalizedFacetDescriptorImpl">

        <Documentation>cisco ietf natv1</Documentation>

        <FacetOf namespace="http://im.ca.com/core" name="Item" />

        <DisplayName>cisco ietf natv1</DisplayName>

        <TableName>NRM_CISCO_IETF_NATV1</TableName>

        <Protocol>IMDB</Protocol>

        <Normalized>true</Normalized>

        <ComponentFacets>

            <Facet>{http://im.ca.com/inventory}Device</Facet>

        </ComponentFacets>

        <AttributeGroup name="ciscoietfnatv1" external="true" list="true">

            <Documentation />

            <Attribute name="CountNatEntries" type="Long">

                <Documentation>Count Nat Entries</Documentation>

                <IsDbColumn>true</IsDbColumn>

                <Baseline>false</Baseline>

                <RollupExpression />

                <Minimum>true</Minimum>

                <Maximum>true</Maximum>

                <RollupStrategy>Avg</RollupStrategy>

                <StandardDeviation>true</StandardDeviation>

                <Variance>false</Variance>

                <Percentile>0</Percentile>

                <Percentile2>0</Percentile2>

                <Percentile3>0</Percentile3>

                <ProjectionPercentile>0</ProjectionPercentile>

                <Polled>true</Polled>

            </Attribute>

            <Attribute name="Descriptions" type="String">

                <Documentation />

            </Attribute>

            <Attribute name="Indexes" type="ObjectID">

                <Documentation />

            </Attribute>

            <Attribute name="Names" type="String">

                <Documentation />

            </Attribute>

        </AttributeGroup>

        <Attribute name="SourceFacetTypes" cached="true" list="true" persistent="true" type="QName">

            <Documentation />

        </Attribute>

        <BaselineDefinitions>

            <Baseline name="HourlyBaseline">

                <ID>1</ID>

                <PerformanceMetric>CountNatEntries</PerformanceMetric>

                <Period>1 Hour</Period>

                <Window>30 Days</Window>

                <StartDate>0</StartDate>

                <EndDate>0</EndDate>

                <DaysOfWeek>0</DaysOfWeek>

            </Baseline>

            <Baseline name="DailyBaseline">

                <ID>2</ID>

                <PerformanceMetric>CountNatEntries</PerformanceMetric>

                <Period>1 Day</Period>

                <ProjectionInterval>0</ProjectionInterval>

                <ProjectionInterval2>0</ProjectionInterval2>

                <ProjectionInterval3>0</ProjectionInterval3>

                <Window>90 Days</Window>

                <StartDate>0</StartDate>

                <EndDate>0</EndDate>

                <DaysOfWeek>0</DaysOfWeek>

            </Baseline>

        </BaselineDefinitions>

        <Expressions>

            <ExpressionGroup destCert="{http://im.ca.com/inventory}DeviceComponent" name="DeviceComponent">

                <Expression destAttr="IndexList">Indexes</Expression>

            </ExpressionGroup>

            <ExpressionGroup destCert="{http://im.ca.com/core}Item" name="Item">

                <Expression destAttr="Name">Names</Expression>

                <Expression destAttr="Description">Descriptions</Expression>

            </ExpressionGroup>

        </Expressions>

    </FacetType>

</DataModel>

thank you,

Valéria

[Jeffrey Pinard]

Probably best to create a new MF.  I updated your MF to have new name, etc to match a MF to be created at device level.  new VC after the new MF definition too.

<?xml version="1.0" encoding="UTF-8"?>

<DataModel namespace="http://im.ca.com/normalizer" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="IMDBCertificationFacet.xsd">

    <Author>Custom</Author>

    <Version>1.0</Version>

    <FacetType name="CiscoIETFNATInfV1" descriptorClass="com.ca.im.core.datamodel.certs.NormalizedFacetDescriptorImpl">

        <Documentation>Cisco IETF NatV1 Interface</Documentation>

        <FacetOf namespace="http://im.ca.com/core" name="Item" />

        <DisplayName>Cisco IETF NatV1 Interface</DisplayName>

        <TableName>NRM_CISCO_IETF_NATV1_INF</TableName>

        <Protocol>IMDB</Protocol>

        <Normalized>true</Normalized>

            <Attribute name="CountNatEntries" type="Long">

                <Documentation>Count Nat Entries</Documentation>

                <IsDbColumn>true</IsDbColumn>

                <Baseline>false</Baseline>

                <RollupExpression />

                <Minimum>true</Minimum>

                <Maximum>true</Maximum>

                <RollupStrategy>Avg</RollupStrategy>

                <StandardDeviation>true</StandardDeviation>

                <Variance>false</Variance>

                <Percentile>0</Percentile>

                <Percentile2>0</Percentile2>

                <Percentile3>0</Percentile3>

                <ProjectionPercentile>0</ProjectionPercentile>

                <Polled>true</Polled>

            </Attribute>

        <Attribute name="SourceFacetTypes" cached="true" list="true" persistent="true" type="QName">

            <Documentation />

        </Attribute>

        <BaselineDefinitions>

            <Baseline name="HourlyBaseline">

                <ID>1</ID>

                <PerformanceMetric>CountNatEntries</PerformanceMetric>

                <Period>1 Hour</Period>

                <Window>30 Days</Window>

                <StartDate>0</StartDate>

                <EndDate>0</EndDate>

                <DaysOfWeek>0</DaysOfWeek>

            </Baseline>

            <Baseline name="DailyBaseline">

                <ID>2</ID>

                <PerformanceMetric>CountNatEntries</PerformanceMetric>

                <Period>1 Day</Period>

                <ProjectionInterval>0</ProjectionInterval>

                <ProjectionInterval2>0</ProjectionInterval2>

                <ProjectionInterval3>0</ProjectionInterval3>

                <Window>90 Days</Window>

                <StartDate>0</StartDate>

                <EndDate>0</EndDate>

                <DaysOfWeek>0</DaysOfWeek>

            </Baseline>

        </BaselineDefinitions>

    </FacetType>

</DataModel>

And new VC:

<?xml version="1.0" encoding="UTF-8"?>
<!--Auto-generated by the type catalog local manager.-->
<DataModel namespace="http://im.ca.com/certifications/snmp" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="SNMPCertificationFacet.xsd">
<Author>Custom</Author>
<Version>1.0</Version>
<FacetType name="CISCO_IETF_NAT_MIB" descriptorClass="com.ca.im.core.datamodel.certs.CertificationFacetDescriptorImpl">
<Documentation>Count Nat Entries</Documentation>
<FacetOf namespace="http://im.ca.com/core" name="Item" />
<DisplayName>ciscoietfnatv1</DisplayName>
<MIB>CISCO-IETF-NAT-MIB</MIB>
<Protocol>SNMP</Protocol>
<Attribute name="cnatAddrBindNumberOfEntries" external="true" type="Long">
<Documentation>"This object maintains a count of the number of entries that currently exist in the cnatAddrBindTable."</Documentation>
<Source>1.3.6.1.4.1.9.10.77.1.2.1.0</Source>
<IsIndex>false</IsIndex>
<IsKey>true</IsKey>
<NeedsDelta>false</NeedsDelta>
</Attribute>
<Attribute name="cnatAddrPortBindNumberOfEntries" external="true" type="Long">
<Documentation>"This object maintains a count of the number of entries that currently exist in the cnatAddrPortBindTable."</Documentation>
<Source>1.3.6.1.4.1.9.10.77.1.2.3.0</Source>
<IsIndex>false</IsIndex>
<IsKey>false</IsKey>
<NeedsDelta>false</NeedsDelta>
</Attribute>
<Expressions>
<ExpressionGroup destCert="{http://im.ca.com/normalizer}CiscoIETFNATInfV1">
<Expression destAttr="CountNatEntries">cnatAddrBindNumberOfEntries</Expression>
</ExpressionGroup>
</Expressions>
</FacetType>
</DataModel>