How about writing a rule in mrl to capture the data, and store in a slot of your choice.
What does the message text look like at the moment?
Thanks for the reply.
I do not know how to make a rule in mrl. Do you know how to use the substr() function to use in the file mcsnmptrapd.map? This perhaps could solve our problem.
If the text is consistent (with just the interface value changing), I would suggest using the strmatch primitive.
refine getInterface: EVENT ($EV) <---- use the specific event class here
where [ ..... ] <----- set your selection criteria
strmatch($EV."nic: <%s> went online",[$NIC]);
$EV.msg = "Interface " || $NIC || " is UP";
This is a great solution, but I do not know how to use the MRL rules. Which file I have to change? After modifying the file, do I have to run some command?
I want to use your choice, but I need to know how to use it.
Thanks in advace!
You have to create a file in the cell's KB "rules" directory. Thereafter, you have to add this file to the .load file. Finally, you have to recompile and restart the cell.
I'd suggest to read the BMC Knowledge Base Development Reference Guide. It explains these steps in detail.
I'll do my best to help you here, but if I can offer one piece of advice, it's to learn MRL. Integrating events into BEM/BPPM without taking advantage of the rules language is like buying the best possible bicycle and choosing not to put air in the tires...
First, can you please export one of the events in BAROC format and post it here?
Thanks for your answers. This will help me a lot.
ma14pg6: I will try to create new file in KB rules directory and will inform you. Thank you very much.
carslone: Attached have the baroc file . Thank you for your help.
mcevent.baroc 2.7 K
The event you attached doesn't appear to have anything to do with the example you posted. You mentioned the mcsnmptrapd file and a NIC going online, yet you posted a CONTROL-M event about a test job "ending not OK".
Yes, sorry, you're right. But now I'm on another customer and I can not export the same event. I can simulate the event could be given in this example.
Could be worth it?
Thanks & regards.
mcevent.baroc 3.9 K