Alarms from new vmware probe in uim get assigned to event model instead of existing uim vm model

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

UIM alarms from the new VMware probe get assigned to a Spectrum event model instead of the existing UIM VM model.

• Impact: When the Spectrum event model that the alarm is assigned to doesn't match the device that is actually experiencing the alarm condition, the operators who watch Spectrum may assign the ticket to the wrong group.

• The customer had a new UIM vmware robot model in Spectrum

• This VMware is different than the others modeled, in UIM it is "standalone" on its own UIM robot probe, and not contained within UIM hubs as the rest of the VMware probes in our environment

• For this new model, some alarms do not get forwarded from the eventadmin model

• When checking the events we see that when the alarm is forwarded, the {S8} variable for Southboaud Gateway (SBGW) "target address" is an IP address but for those alarms that do not get forwarded, {S8} is a hostname, and hence the southbound gateway (SBGW) cannot forward to the proper IP Address

• When DNS is checked for the hostname it fails

• The customer does not own the device so they cannot edit DNS to add an entry for it

  *** <FQDN> can't find <hostname>: Non-existent domain

Environment

• UIM v8.5
• Southbound Gateway
• Note that in later versions of DX UIM, the SouthBound Gateway is no longer used, and the specgrumgtw probe replaces it.

Cause

• Configuration
• No host entry in DNS

Resolution

For snmptd alarms, customer needs to know of any options that are available to send IP address in the trap alarm instead of hostname. See Resolution section.

The snmptd probe captures incoming traps and converts them into UIM alarms. 

The probe has a feature of 'Name resolution' 

Variable Expansion 
The SNMP-TRAP contains many elements, such as the Enterprise identifier, community string, trap types (generic and specific), and a variable list. The snmptd probe provides the means of extracting this information from the SNMP-TRAP as variables. You can use this information as part of the alarm message body. 

When you type $ (a dollar sign) in the Message text box, the following list of variables appears: 

One of them is: 

$IP 
Defines the source IP address 

Reference: 

snmptd IM configuration

Optionally, you could try using the nas Name Service Tab if the hostname is resolvable to the IP as the nas is capable of doing host/IP translation. 

nas Name Services

Options:
Change the alarm field(s) with a NAS rule and/or DNS.