I've enabled trap-forwarding in OME and I wonder how correlation is supposed to be done. The message is alterered between the different severity-levels (se exaple below) so that can't easily be used. The OME MIB-file doesn't contain the possible messages (which must be distinguishable) so a safe match for correlation can't be made.So..
how do one correlate the traps?
Message - " System is down: myserver.blabla.se"Host - myserver.blabla.seSeverity - CriticalMessage - " System is up: myserver.blabla.se"Host - myserver.blabla.seSeverity - Normal
And no, host+severity is not ok to use. Example:
Critical disk warning -> (system reboot) System down -> System up; Voilá! Status ok & Disk ok..
Hi, thanks for the post.
The OME mib is just for forwarded traps. You'd have to look at the mib from the originating managed node to see how they form the messages.
It looks like you had a critical for a system down and then followed by a normal for a system up. This is good, yes?
I think I'm not getting the entire point of your question...
Also, you can go to the Manage | Alerts, and on the left you can see all the alert categories and traps that are defined to OME. Don't know if that will help.