OMW 9 Varbind pattern match for Variable Type "IP Address" (555 Views)
Reply
Visitor
BigyHebert
Posts: 5
Registered: ‎12-19-2013
Message 1 of 11 (555 Views)

OMW 9 Varbind pattern match for Variable Type "IP Address"

Hello,

 

Please bare with me as I am new to Openview and NNM. I have a trap flowing into the OMW server that I am trying to write a custom policy for. I'm having an issue getting it to match IpAddress variable types.

 

For example, I am unable to match the following lines:

 

[1] .1.3.6.1.2.1.14.1.1.1.0 (IpAddress): 10.200.250.1
[2] .1.3.6.1.2.1.14.10.1.1.1.0 (IpAddress): 10.200.230.2

 

Using Variable 1 in the example above, I tried matching the event by doing the following:

$1 matches <*>10.200.250.1<*>

 

When I do a Matching Test, it matches fine. If I generate the trap, it does not match.

 

Does anyone have any ideas on this?

Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 2 of 11 (549 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Hello ,

 

 

Let me know how you are generating the Trap , are you doing that with snmpnotify command , or you simulate the trap it self , !!!

 

Do u have access to NNM to see the Trap as well and see the Custom attributes !

 

 

This is SNMP Interceptor Policy  , Right ! have you check the Field Type: choose your matching condition

12-20-2013 1-57-19 AM.jpg

 

 

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Visitor
BigyHebert
Posts: 5
Registered: ‎12-19-2013
Message 3 of 11 (539 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Hello Mostafa,

 

I am not using the snmpnotify command, but am generating the event in our lab environment by triggering what would cause the trap to come out.

 

I do have access to the NNM and can see the traps and custom attribtues. These are the custom attributes for the OSPFNbrStateChange trap:

.1.3.6.1.2.1.14.1.1.1.0 (asn_ipaddress)

10.200.250.1

.1.3.6.1.2.1.14.10.1.1.1.0 (asn_ipaddress)

10.200.230.2

.1.3.6.1.2.1.14.10.1.2.2.0 (asn_integer)

8

.1.3.6.1.2.1.14.10.1.3.3.0 (asn_ipaddress)

10.230.1.2

.1.3.6.1.2.1.14.10.1.6.6.0 (asn_integer)

8

cia.snmpoid (String)

.1.3.6.1.2.1.14.16.2.2

cia.address (String)

10.99.1.2

cia.originaladdress (String)

10.99.1.2

cia.tenant.name (String)

corp.bigy.com

cia.tenant.uuid (String)

85847735-b99d-4e6e-8fb0-c451595d4d7c

 

Yes, this is an SNMP Interceptor Policy. Where is the Field Type matching option? Is that in NNMi or OMW?

 

Thanks,

 

Adam Hebert

 

Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 4 of 11 (537 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

In OM policy , under condition , there is type !

 

what option u configured ?

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 5 of 11 (536 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Now you can see that other tabs appear for condition.

Go to Message tab:

 12-20-2013 2-52-26 AM.jpg

Here you are able to define a special message for this condition, when en event occurs, OM will create alarm in priority with the message specify in each condition, otherwise by default, OM will use the Message defaults of the policy.

 

Go to Actions tab:

 

Actions can be define, automatic or operator actions.

 

Go to Custom attributes tab:

 12-20-2013 2-52-53 AM.jpg

 

Once you create a custom attributes, give it a name and a value:

 

 

 Have you created that ?

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Visitor
BigyHebert
Posts: 5
Registered: ‎12-19-2013
Message 6 of 11 (484 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Hi Mostafa,

 

I have been using the HP Openview Manager program on the OMW server for making all of my policy configurations, so it differs from your screenshots. I'm uploading the attachments now for you to see, but I have the SNMPv1 Notation selected with the proper Enterprise ID, Generic ID, and Specific ID entered. In addition, I have two variable bindings (Custom Attributes). The problem is with the first one ($1 matches <*>10.200.250.1<*>)   Even though it passes the match test (attaching a screen shot for you to see), it never matches the trap that comes out. If I remove the $1 variable and just match on the $5 variable, it matches fine. I'm not sure why it's having issues with matching the IP Addresses.

 

I do have a custom Message defined along with an automatic action. These work properly if I only match on $5. If I try to match on $1, then the policy never intercepts the trap.

 

Thanks,

 

Adam Hebert

Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 7 of 11 (447 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

You can check the From NNM , for the Trap which u have generated ,

 

select one of these Incidents and Go to Actions > Incident Configuration , check the description of the Trap incidents , and please Paste it here to see which custom attruibuites you are looking for !

 

 

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Visitor
BigyHebert
Posts: 5
Registered: ‎12-19-2013
Message 8 of 11 (418 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Here is the description for the trap incident:

An ospfNbrStateChange trap signifies that there has been a change in the state of a non- virtual OSPF neighbor. This trap should be generated when the neighbor state regresses (e.g., goes from Attempt or Full to 1-Way or Down) or progresses to a terminal state (e.g., 2-Way or Full). When an neighbor transitions from or to Full on non-broadcast multi-access and broadcast networks, the trap should be gen- erated by the designated router. A designated router transitioning to Down will be noted by ospfIfStateChange.

 

Here is the Message format:

OSPF Neighbor State Change: RouterId: $1, NeighborIpAddress: $2, NeighborRouterId: $4, NeighborState: $5 ($text($5))

 

 

Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 9 of 11 (414 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Can you please paste the Trap incident which is created , example 

 

OSPF Neighbor State Change: RouterId: 2.2.2.2 , NeighborIpAddress: 10.1.0.2 , NeighborRouterId: 1.1.1.1, NeighborState: Active

 

Is there any integration from NNM to OMW !

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
Visitor
BigyHebert
Posts: 5
Registered: ‎12-19-2013
Message 10 of 11 (412 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

Here is the Trap Incident:

OSPF Neighbor State Change: RouterId: 10.200.250.1, NeighborIpAddress: 10.200.230.2, NeighborRouterId: 10.230.1.2, NeighborState: 1 (down)

 

NNMi and OMW are integrated using the HPOM agent.

Respected Contributor
mostafa_hassan
Posts: 264
Registered: ‎12-11-2011
Message 11 of 11 (410 Views)

Re: OMW 9 Varbind pattern match for Variable Type "IP Address"

So , you are trying to generate policy to match the Router ID , 10.200.250.1 .. , what is the point to create such apolicy !

 

for the Integration , the Test Message comes with the same format ..

 

I recommand webservice integration >> that will acknoweldge the messages if they are automatically updated in OM as well .

All the best .
Saying Thanks by hitting Kudos :)

Regards
Mostafa Hassan
HP AIS NNM-NA-OO
CCNA-CCNP-ITIL-VCA-Cloud-VCA DataCenter
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.