Event procedure is not creating a new event with all the existing variable values since upgrade Spectrum

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

Spectrum was upgraded from 10.4.0 to 23.3.5 a few months ago, but the problem was only noticed a couple of days ago.

The Wily alert trap processing events were customized via Event Procedure to generate a new event with custom dynamic alarm title.

But the event does not any variable values from the previous event.

Environment

Spectrum 23.3.5

Cause

The customization was done in the $SPECROOT/SS/CsVendor/gen_app_gw/IntroscopeAdmin/AlertMap file, to map varbind 1.3.6.1.4.1.791.4.4.9 to variable 115.

In the $SPECROOT/SS/CsVendor/gen_app_gw/IntroscopeAdmin/AlertMap file:

1.3.6.1.4.1.791.6.1 0x3ec20000 1.3.6.1.4.1.791.4.4.1(100,0) \
                               1.3.6.1.4.1.791.4.4.2(101,0) \
                               1.3.6.1.4.1.791.4.4.3(102,0) \
                               1.3.6.1.4.1.791.4.4.4(103,0) \
                               1.3.6.1.4.1.791.4.4.5(104,0) \
                               1.3.6.1.4.1.791.4.4.6(1,0) \
                               1.3.6.1.4.1.791.4.4.7(2,0) \
                               1.3.6.1.4.1.791.4.4.8(3,0) \
                               1.3.6.1.4.1.791.4.4.9(115,0) \
                               1.3.6.1.4.1.791.4.4.10(109,0) \
                               1.3.6.1.4.1.791.4.4.11(110,0) \
                               1.3.6.1.4.1.791.4.4.12(111,0) \
                               1.3.6.1.4.1.791.4.4.13(113,0) \
                               1.3.6.1.4.1.791.4.4.14(114,0) \
                               1.3.6.1.6.3.18.1.3.0(112,0)

0x3ec20001 P "CreateEventWithVariables({C CURRENT_MODEL},{H 0x05990007}, SetEventVariable(GetEventVariableList(), {H 0x12b4c}, Append(Append(Append(Append(Append(Append({S \"Escalar a: SOA, Mensaje: \"},GetEventVariable({ U 115})),{S \" (Metric Value: \"}),GetEventVariable({ U 109})),{S \") (Metric Threshold: \"}),GetEventVariable({ U 111})),{S \")\"}) ))"

Once Spectrum was upgraded, the custom $SPECROOT/SS/CsVendor/gen_app_gw/IntroscopeAdmin/AlertMap file was overwritten by the default file.

Resolution

Rather than customizing the $SPECROOT/SS/CsVendor/gen_app_gw/IntroscopeAdmin/AlertMap file, modified the Event Procedure to grab the value of varbind 1.3.6.1.4.1.791.4.4.9  from the dynamic alarm title attribute ID (0x12b4c):

0x3ec20001 P "CreateEventWithVariables({C CURRENT_MODEL},{H 0x05990007}, SetEventVariable(GetEventVariableList(), {H 0x12b4c}, Append(Append(Append(Append(Append(Append({S \"Escalar a: SOA, Mensaje: \"},GetEventVariable({ H 0x12b4c})),{S \" (Metric Value: \"}),GetEventVariable({ U 109})),{S \") (Metric Threshold: \"}),GetEventVariable({ U 111})),{S \")\"}) ))"