netsight alarm definition file

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
  • (Edited)

Netsight 6.2 - Console - Alarms Manager

In which file are the alarms saved? Is it possible to edit this file?

Photo of Wendelin Bluelle

Wendelin Bluelle

  • 110 Points 100 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Johan Hendrikx

Johan Hendrikx

  • 3,876 Points 3k badge 2x thumb

If you mean the file where the alarms are defined.

In the windows environment it is the file  C:\Program Files\Extreme Networks\NetSight\services\trapd

Photo of Wendelin Bluelle

Wendelin Bluelle

  • 110 Points 100 badge 2x thumb

hi Johan,

no. As you know if you get a trap, you will not get an alarm unless you defined an alarm using the trap you get (and the trap must be added in the trapd.conf). To define an alarm I open the Alarms Manager an define for instance the alarm action, start program X. Where is this saved?

Thanks, Wendelin 

Photo of Johan Hendrikx

Johan Hendrikx

  • 3,876 Points 3k badge 2x thumb
That I don't know.I think in the netsight database.
Photo of Thomas, Frank

Thomas, Frank, Employee

  • 1,902 Points 1k badge 2x thumb
Alarms are defined in the netsight database in the table  nsalarmdefs 

Example
mysql> SELECT * FROM nsalarmdefs limit 2;+----+-----------------------------+---------+------+----------+------------+---------+---------+---------------+----------+---------+---------------+---------------+-----------+------------+---------+-----------+-------------+-------------+---------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+---------------+--------------------------------------------------------------+--------+-------------------+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| ID | NAME                        | ENABLED | TYPE | SEVERITY | MAXENABLED | MAXSENT | NUMSENT | RESETINTERVAL | ACTIONID | GROUPID | MATCHSEVERITY | MATCHCATEGORY | MATCHTYPE | MATCHEVENT | MATCHIP | MATCHVIEW | MATCHPHRASE | MATCHLOGMGR | CUSTOMACTIONPROCESSINGXML | ACTIONDATA                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | ACTIONSCRIPT | ALARMSEVERITY | CLEARDATA                                                    | SYSTEM | THRESHOLDIMPLNAME | THRESHOLDCONFIG | DATA                                                                                                                                                                                                                                                                              |
+----+-----------------------------+---------+------+----------+------------+---------+---------+---------------+----------+---------+---------------+---------------+-----------+------------+---------+-----------+-------------+-------------+---------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+---------------+--------------------------------------------------------------+--------+-------------------+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|  1 | Spanguard                   |       1 |    2 |        0 |          0 |       1 |       0 |       3600000 |        0 | NULL    |             0 |             0 |         0 |          0 |       0 |         0 |           0 |           0 | NULL                      | <NotifyActionContent><customArguments>$deviceIp $message</customArguments><emailBody>$null</emailBody><emailSubject>$alarmName $eventType ($eventSeverity) for $deviceIpCtx</emailSubject><isaacMessage>$message</isaacMessage><actionFormatEnabled>true</actionFormatEnabled></NotifyActionContent>~ISAAC~`~CUSTOM~/usr/local/Enterasys_Networks/NetSight/scripts/alarms/spanguard.pl`/usr/local/Enterasys_Networks/NetSight/scripts/alarms`                                                                                                                                                                                                                                                                              | NULL         |             3 | <ClearAlarmData><clearless>true</clearless></ClearAlarmData> |      0 | NULL              | NULL            | <data><flowCriteriaType>0</flowCriteriaType><flowSourceTtl>0</flowSourceTtl><flowSourcePort>0</flowSourcePort><matchFlowSourceNetwork>0</matchFlowSourceNetwork><matchFlowDestinationNetwork>0</matchFlowDestinationNetwork><flowSuppressInterval>0</flowSuppressInterval></data> |
|  8 | NOTIFY LeftHandStorageNodes |       1 |    3 |        0 |          0 |       1 |       0 |       3600000 |        0 | 10      |             0 |             0 |         0 |          0 |       0 |         0 |           0 |           0 | NULL                      | <NotifyActionContent><emailBody>Date/Time:
$time
Message:
$eventTitle: $message
Device Information:
 - Device: $deviceIp
 - Device NickName: $deviceNickName
 - sysName: $sysName
 - sysLocation: $sysLocation
 - sysContact: $sysContact
 - sysDescription: $sysDescr
 - sysUptime: $sysUpTime
 - chassisId: $chassisId
 - bootProm: $deviceBootProm
 - firmware: $deviceFirmware
 - chassisType: $chassisType
 - status: $deviceStatus
Trap Information:
 - Trap Name: $trapName
 - Trap OID: $trapOid
 - Trap Date: $time
 - Trap Args: $trapArgs</emailBody><emailSubject>$eventType ($eventSeverity) for $deviceIpCtx</emailSubject><actionFormatEnabled>true</actionFormatEnabled></NotifyActionContent>~EMAIL~8` | NULL         |             0 | <ClearAlarmData><clearless>true</clearless></ClearAlarmData> |      0 | NULL              | NULL            | <data><flowCriteriaType>0</flowCriteriaType><flowSourceTtl>0</flowSourceTtl><flowSourcePort>0</flowSourcePort><matchFlowSourceNetwork>0</matchFlowSourceNetwork><matchFlowDestinationNetwork>0</matchFlowDestinationNetwork><flowSuppressInterval>0</flowSuppressInterval></data> |
+----+-----------------------------+---------+------+----------+------------+---------+---------+---------------+----------+---------+---------------+---------------+-----------+------------+---------+-----------+-------------+-------------+---------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+---------------+--------------------------------------------------------------+--------+-------------------+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)
Why would you want to edit this from here and not the alarm manager?
Photo of Wendelin Bluelle

Wendelin Bluelle

  • 110 Points 100 badge 2x thumb
Thank you. I do define alarms for a third party device. For instance an alarm for "SFP plugged out" and one for "SFP plugged in". And "SFP plugged in" clears the "SFP plugged out". This definitions are now in my demo system. How to ADD this to the Netsight system of my customer? If I could edit the alarms definitions I just could copy/add "my alarms".
Photo of Johan Hendrikx

Johan Hendrikx

  • 3,876 Points 3k badge 2x thumb

You have to define the alarms in the :\Program Files\Extreme Networks\NetSight\services\trapd (windows enviorment )

The  enty must like:

EVENT extremePortMauChangeTrap .1.3.6.1.4.1.1916.1.4.13.2.0.1 "Status Alarms" Warning

FORMAT $1 $3

SDESC

"SFP removed or inserted on switch"


EDESC