Map an unknown alert/trap and merge/concatenate varbinds to generate a dynamic alarm title via event procedure

Products

• Spectrum
• Network Observability

Issue/Introduction

We would like the DX NetOps Spectrum to create a custom alarm that contains what's in these OID (IP+error message). Either in the alarm title or in the alarm message. Is that possible ?

unknown alert - 0x10801

 

Environment

DX NetOps Spectrum 20.x

Resolution

Map the incoming trap to the Spectrum variables.

In the $SPECROOT/custom/Events/AlertMap file:

1.3.6.1.4.1.8072.4.6.4      0xfff00000 1.3.6.1.2.1.1.1.0(1,0)\
                                       1.3.6.1.2.1.1.1.1(2,0)

Create an Event Procedure to concatenate the variables' values to create a dynamic alarm title in the 0x12b4c variable.

In the $SPECROOT/custom/Events/EventDisp file:

0xfff00000 E 10 P "\
     CreateEventWithVariables (\
     {C CURRENT_MODEL},\
     {H 0xfff00001},\
     SetEventVariable (\
     GetEventVariableList(),\
     {H 0x12b4c},\
     Append(Append(Append({S \"Alert - \" }, GetEventVariable({U 2})), {S \" - IP: \"}), GetEventVariable({U 1})) ))"
0xfff00001 E 0 A 1,0xfff00001

 

Click on the "Update Event Configuration" button under the SpectroSERVER Control subview of the VNM model to load the changes made on the AlertMap and EventDisp files into the SpectroSERVER memory.