Need an alarm if the Spectrum Network Configuration Manager detects more than X line changes in a configuration

Products

• Network Observability
• Spectrum

Issue/Introduction

Need an alarm if the Spectrum Network Configuration Manager detects more than X line changes in a configuration

Environment

Version: Any
Component: Network Configuration Manager

Resolution

If there is a configuration change from the last capture, the 0x82105a event is generated. One variable in that event is "Total Number of Line Changes" which is event variable 9. The following is the contents of the Event Format file for the 0x82105a event:

Event0082105a_en_US
------------------------

{d "%w- %d %m-, %Y - %T"} Configuration Manager - A configuration change notification was received from device {m} of type {t} on landscape {S 1}.

Device trap(s) provided:
  Device User: {S 2}
  From: {S 3}
  On: {S 4}

The following information was provided by SPECTRUM:
  Device User: {S 2}
  Spectrum User: {S 5}
  NCM Communication Mode: {S 6}
  Capture Succeeded: {S 7}
  Capture Error Message: {S 8}
  Total Number of Line Changes: {I 9}
  Relevant Number of Line Changes: {I 10}
  Violated Policies: {S 11}
  Compliant Policies: {S 12}
  Model handle of current configuration model: {H 13}
  Model handle of previous configuration model: {H 14}

So what we can do is add an Event Condition Rule to the 0x82105a event checking the value of event variable 9 and if greater than X, generate a new event that alarms the number of line changes has been exceeded.

0x82105a E 0 R CA.EventCondition, "({v 9} >= {I 100})" , "0xfff0060b  -:-"
"EventDisp" 1418L, 42859C    

0xfff0060b E 0 A 3,0xfff0060b

In my testing, I created a copy of the  0x82105a to event 0xfff0060b and added an alarm to event 0xfff0060b .