We are not able to find this event (0x00220003) mapping in any EventDisp or AlerMap files. We would like to know how this works in Spectrum to create the interface down alarm.
Spectrum: Any
Spectrum Event Processing
The event 0x00220003 is a special event that takes the traps that are sent on the device model and then asserts it to the interface model.
When a link down trap is received by Spectrum on a device model, by default, Spectrum generates the 0x00220001 event on the device model
There is "special" underlying code that is run the takes the ifIndex value from the link down trap and looks for the interface model associated with the device that has that ifIndex and generates the 0x00220003 event on the interface model.