Smarts SAM: SAM is not processing traps received from a Smarts OI domain; Receive 'Default rule reached' errors originating from the ics-nl-processing.asl

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:




Smarts SAM is not processing traps received from a Smarts Open Interface (OI) domain
Smarts SAM receives "Default rule reached" errors originating from the ics-nl-processing.asl file

Errors similar to the following are seen in the Smarts SAM server log:

[09-Feb-2009 15:44:58+024ms GMT] t@59 <Server>-OI_NL-Driver
ICS-E-EDEFAULTRULEREACHED-ics-nl-processing.asl: Default rule reached:
    '1234194298"NL_CHANGE"CUST""[ID 702911 daemon.error] [09-Feb-2009
    15"ID_kO`:4t=jt58hI.B"

Environment

VMware Smart Assurance - SMARTS

Cause

These errors indicate that the events in question do not match any of the previous rules in the ics-nl-processing.asl file. This is because the syslog events include unrecognized characters, such as 15"ID_kO`:4t=jt58hI.B"in the Symptom statement example error.

Resolution

To resolve this issue, you must correct the source of the syslog messages.