7 Replies Latest reply on Jun 11, 2012 4:55 AM by Lalit Gupta

    enrichment of slots in parenthesis

      hi,

          we have configured bppm to receive snmp traps from networker. Because of unavailability of MIB for networker, we are trying to make a dynamic enrichment rule in bem, to translate value of the slot snmp_vals into the "msg" slot so that the trap message can be seen in bppm and further into remedy. However, the value of snmp_vals is in parenthesis and when the data file is imported into the cell, the following error is thrown...

       

                 the placeholdes %s is incompatible with type list_of(atoms).

       

         if we try to translate a value which is not in parenthesis, we are successful. In this case, how can we translate values appearing in parenthesis ?

       

      regards

       

      lalit

        • 1. enrichment of slots in parenthesis
          Ganesh Suresh

          Can you please copy and paste one example event..? I can help you with the rule.

          Recently even i had the very similar requirement..

           

          Thanks,

          Ganesh

          • 2. enrichment of slots in parenthesis

            Hi ,

             

            Below is one of sample snmp trap event.I want to snmp_vals slot into msg slot.

             

            SNMP_ENTERPRISE;

            acl=['admin'];

            adapter_host='zimmer-bppm.nam.zimmer.com';

            administrator='';

            credibility=1;

            date='20120607123910.000000-300';

            date_reception=1339087150;

            duration=0;

            event_handle=679159;

            hostname='';

            itsm_assignedGroup='';

            itsm_assignedGroupID='';

            itsm_assignee='';

            itsm_category='';

            itsm_company='';

            itsm_incidentnumber='';

            itsm_item='';

            itsm_location='';

            itsm_manufacturer='';

            itsm_model_version='';

            itsm_operational_category1='';

            itsm_operational_category2='';

            itsm_operational_category3='';

            itsm_product_name='';

            itsm_supportCompany='';

            itsm_supportOrganization='';

            itsm_type='';

            mc_abstracted=[];

            mc_abstraction=[];

            mc_account='';

            mc_acl=[];

            mc_action_count=0;

            mc_arrival_time=1339087150;

            mc_associations=[];

            mc_bad_slot_names=[];

            mc_bad_slot_values=[];

            mc_cause=0;

            mc_client_address='10.203.60.1';

            mc_collectors=[''1.1.1'',''3.1.1''];

            mc_date_modification=1339087150;

            mc_effects=[];

            mc_event_category=;

            mc_event_model_version='1.1';

            mc_event_relations=[];

            mc_event_subcategory=OTHER;

            mc_history=[];

            mc_host='zimmer-bppm.nam.zimmer.com';

            mc_host_address='10.203.60.243';

            mc_host_class='';

            mc_host_id=1;

            mc_incident_report_time=1339087150;

            mc_incident_time=0;

            mc_it_mgmt_process='';

            mc_local_reception_time=1339087150;

            mc_location='nam.zimmer.com';

            mc_long_msg='';

            mc_modhist=[''pncell_zimmer-bppm''];

            mc_notes=[];

            mc_notification_history=[];

            mc_object='Snmp';

            mc_object_class='MA::ESnmpTrap';

            mc_object_owner='';

            mc_object_uri='';

            mc_operations=['0x4fd0d92e',''tcs_im_internal.mrl:refine dden_policy_rule'','Priority_SeverityMapping',''Dynamic Data Enrichment'',''''];

            mc_origin='Snmp';

            mc_origin_class='MA::ESnmpTrap';

            mc_origin_key='';

            mc_origin_sev='';

            mc_original_priority=PRIORITY_5;

            mc_original_severity=OK;

            mc_owner='';

            mc_parameter='';

            mc_parameter_threshold='';

            mc_parameter_unit='';

            mc_parameter_value='';

            mc_priority=PRIORITY_5;

            mc_propagations=[''pn_server_zimmer-bppm:2171''];

            mc_relation_source='';

            mc_service='';

            mc_smc_alias='BMC_ComputerSystem:zimmer-bppm:nam.zimmer.com';

            mc_smc_causes=[];

            mc_smc_effects=[];

            mc_smc_id='zimmer-bppm_1';

            mc_smc_impact=IMPACTING;

            mc_smc_priority=0.000000e+000;

            mc_smc_type='BMC_ComputerSystem';

            mc_timeout=0;

            mc_tool='enterprises';

            mc_tool_address='10.203.60.1';

            mc_tool_class='SnmpTrap';

            mc_tool_id='';

            mc_tool_key='';

            mc_tool_rule='';

            mc_tool_sev='';

            mc_tool_suggestion='';

            mc_tool_time=1339087150;

            mc_tool_uri='';

            mc_ueid='mc.pncell_zimmer-bppm.fd0d92e.0';

            msg='';

            msg_catalog='';

            msg_index=0;

            num_actions=0;

            origin='';

            pn_detail_diag=0;

            pn_detail_diag_count=0;

            pn_device_name='zimmer-bppm.nam.zimmer.com';

            repeat_count=0;

            server_handle=0;

            severity=CRITICAL;

            site='';

            snmp_community='public';

            snmp_contextEngineID='N/A';

            snmp_contextName='N/A';

            snmp_enterprise='1.3.6.1.4.1.2854';

            snmp_enterprise_str='enterprises';

            snmp_error_index=-1;

            snmp_error_status=-1;

            snmp_oids=[''1.3.6.1.4.1.1643''];

            snmp_oidst=['enterprises'];

            snmp_request_id=-1;

            snmp_securityEngineID='N/A';

            snmp_securityLevel='N/A';

            snmp_securityModel='N/A';

            snmp_securityName='N/A';

            snmp_source_addr='10.203.60.243';

            snmp_specific=1;

            snmp_time_ticks=29081600;

            snmp_trap_type=6;

            snmp_trap_type_str='enterpriseSpecific';

            snmp_vals=[''some sample snmp trap message - 1','another test','test another''];

            snmp_version=0;

            source='';

            status=OPEN;

            sub_origin='';

            sub_source='';

            symptoms='';

            Team_Contact_Number='';

            Team_Name='';

            END

            • 3. enrichment of slots in parenthesis
              Rahul NameToUpdate

              Hello Lalith,

               

              You can use something like that:

              refine Communities:EVENT($E)

              where[$E.status == OPEN]

              {

               

              listwalk($E.snmp_vals,$SLTNM);

              $E.msg=$E.msg || $SLTNM;

              }

              END

               

              You can concat values of snmp_vals in Message slot of the event.

               

              Please try it and let us know it.

               

              Thanks,

              Rahul

              • 4. Re: enrichment of slots in parenthesis

                The rule is compiled and applied,but the event seems to not following it and still output is blank message.

                • 5. enrichment of slots in parenthesis
                  Ganesh Suresh

                  Check this out :-

                   

                  new bmc_community_test: SNMP_ENTERPRISE ($EV)

                    where [$EV.status != CLOSED] #you need to update the ECF as per your requirement

                    triggers

                  ##snmp_vals=[''some sample snmp trap message - 1','another test','test another''];

                      {

                  $val1  = listgetelt($EV.snmp_vals, 1);

                  $val2  = listgetelt($EV.snmp_vals, 2);

                  $val3 = listgetelt($EV.snmp_vals, 3);

                  $EV.msg = $val1;

                  #$EV.mc_host = $val2;                # example

                  #$EV.mc_host_class = $val3;   # example u can map the slots according to ur requirement

                  }

                  END

                   

                  Let me know if this helps..

                   

                  Thanks,

                  Ganesh

                  • 6. Re: enrichment of slots in parenthesis

                    Thanks ...Its working ...just did below modifications in your rule.

                     

                    refine Networker_SNMP_Traps:EVENT($E)

                    where[$E.status == OPEN]

                    {

                    listwalk($E.snmp_vals,$SLTNM);

                    $E.msg=concat([$E.msg,$SLTNM]);

                    }

                    END

                     

                    Thanks

                    -Lalit

                    • 7. Re: enrichment of slots in parenthesis

                      Hi ,

                       

                      I am getting the below error event while generating the snmp trap alert.

                       

                      MC_CELL_PROCESS_ERROR;

                      acl=['admin'];

                      adapter_host='';

                      administrator='';

                      cell_location='10.203.60.1/1828';

                      cell_name='pncell_zimmer-bppm';

                      credibility=1;

                      date='20120611041351.000000-300';

                      date_reception=1339402431;

                      duration=0;

                      error_code=1001;

                      error_goal='refine_networker_snmp_trap__snmp_parseout_msg(SNMP_ENTERPRISE,0x43236d8)';

                      error_message='';

                      error_source='';

                      event='mc.pncell_zimmer-bppm.fd5a8bf.0';

                      event_handle=691186;

                      hostname='';

                      itsm_assignedGroup='';

                      itsm_assignedGroupID='';

                      itsm_assignee='';

                      itsm_category='';

                      itsm_company='';

                      itsm_incidentnumber='';

                      itsm_item='';

                      itsm_location='';

                      itsm_manufacturer='';

                      itsm_model_version='';

                      itsm_operational_category1='';

                      itsm_operational_category2='';

                      itsm_operational_category3='';

                      itsm_product_name='';

                      itsm_supportCompany='';

                      itsm_supportOrganization='';

                      itsm_type='';

                      mc_abstracted=[];

                      mc_abstraction=[];

                      mc_account='';

                      mc_acl=[];

                      mc_action_count=0;

                      mc_arrival_time=1339402431;

                      mc_associations=[];

                      mc_bad_slot_names=[];

                      mc_bad_slot_values=[];

                      mc_cause=0;

                      mc_client_address='';

                      mc_collectors=[''1.1.1'',''3.1.1''];

                      mc_date_modification=1339402431;

                      mc_effects=[];

                      mc_event_category=OPERATIONS_MANAGEMENT;

                      mc_event_model_version='1.1.00';

                      mc_event_relations=[];

                      mc_event_subcategory=OTHER;

                      mc_history=[];

                      mc_host='zimmer-bppm';

                      mc_host_address='10.203.60.1';

                      mc_host_class='Computer';

                      mc_host_id=1;

                      mc_incident_report_time=0;

                      mc_incident_time=1339402431;

                      mc_it_mgmt_process='';

                      mc_local_reception_time=1339402431;

                      mc_location='Unknown';

                      mc_long_msg='';

                      mc_modhist=[''pncell_zimmer-bppm''];

                      mc_notes=[];

                      mc_notification_history=[];

                      mc_object='pncell_zimmer-bppm';

                      mc_object_class='Cell';

                      mc_object_owner='';

                      mc_object_uri='';

                      mc_operations=[];

                      mc_origin='pncell_zimmer-bppm';

                      mc_origin_class='Cell';

                      mc_origin_key='';

                      mc_origin_sev='';

                      mc_original_priority=PRIORITY_5;

                      mc_original_severity=MINOR;

                      mc_owner='';

                      mc_parameter='';

                      mc_parameter_threshold='';

                      mc_parameter_unit='';

                      mc_parameter_value='';

                      mc_priority=PRIORITY_5;

                      mc_propagations=[];

                      mc_relation_source='';

                      mc_service='';

                      mc_smc_alias='zimmer-bppm_1';

                      mc_smc_causes=[];

                      mc_smc_effects=[];

                      mc_smc_id='zimmer-bppm_1';

                      mc_smc_impact=ATTACHED;

                      mc_smc_priority=0.000000e+000;

                      mc_smc_type='BMC_ComputerSystem';

                      mc_timeout=0;

                      mc_tool='pncell_zimmer-bppm';

                      mc_tool_address='10.203.60.1';

                      mc_tool_class='Cell';

                      mc_tool_id='';

                      mc_tool_key='';

                      mc_tool_rule='';

                      mc_tool_sev='';

                      mc_tool_suggestion='';

                      mc_tool_time=0;

                      mc_tool_uri='';

                      mc_ueid='mc.pncell_zimmer-bppm.fd5a8bf.1';

                      msg='Error 1001 occurred during processing of event  691185: Evaluation of function listgetelt(['NetWorker media: (alert) Waiting for 1 writable volume(s) to backup pool \'Default\' disk(s) on nam-msg-n1.nam.zimmer.com'],0x2) failed';

                      msg_catalog='';

                      msg_index=0;

                      num_actions=0;

                      origin='';

                      pn_detail_diag=0;

                      pn_detail_diag_count=0;

                      pn_device_name='zimmer-bppm.nam.zimmer.com';

                      repeat_count=0;

                      server_handle=0;

                      severity=MINOR;

                      site='';

                      source='';

                      status=OPEN;

                      sub_origin='';

                      sub_source='';

                      symptoms='';

                      Team_Contact_Number='';

                      Team_Name='';

                      END

                       

                       

                      thanks

                      Lalit