Introduction
- Describe the value of event reduction
- Describe the purpose of event correlation
- List methods of reducing alarms in the Alarm
Browser
Overview of System and Application Monitoring
- Section Overview
- Message Sources
- Message Processing Flow
- General Configuration Steps
- Message Source Templates Window
- Template Administrator Configuration
- Organizing Templates with Template Groups
- Copying a Template as a Link
- Copying a Template as a Separate Entity
- Assigning Templates
- Distributing Templates
Monitoring Logfiles
- Applications, Systems, and Log Files
- The OVO Logfile Encapsulator
- Log File Template Configuration
- Logfile Encapsulator Process Flow
- Define Source and Defaults
Discriminating between Log Messages
- Message Condition Types
- Message Processing on the Managed Node
- Message and Suppress Conditions Window
- Message Conditions Fields
- Testing Message Conditions
- Variables Used in Templates
Pattern Matching
- Operations Pattern Matching
- Pattern Matching Expressions
- Pattern Matching Rules
- Extract Variable Assignment
- Pattern Matching Examples
- Extract Example
- More Extract Examples
- The Pattern Matching Tester - opcpat
Message Interceptor and opcmsg
- Message Interceptor
- Launching an Operations Message
- Match Steps for Message Interception
- Message Template Configuration
- Message Condition Window
- Using opcmsg with -option
SNMP Trap Interceptor
- SNMP Traps
- SNMP Template Configuration
- SNMP Trap Condition Example
Distributed SNMP Trap Management
- Section Overview
- OVO Distributed Event Interception
- Using ovtrapopc
- SNMP Trap Interceptor on the Management Server
- Distributed Event Interception - Benefits
- Distributed Event Interception - Configuration
- Avoiding Duplicate Messages
Message Reduction in Operations
- Duplicate Message Suppression on the
Manager
- Duplicate Message Suppression on the Agent
- Duplicate Message Suppression Parameters
- Creating Duplicates with Message Keys
- What is a "State-Based" Browser
- Message Key Relations
- Building Effective Message Keys and
Message Key Relations
- Generating Message Keys for Monitor
Templates
Correlating Messages with ECS and Composer
- Event Correlation Service in Operations
- ECS Integration into Operations
- Event Correlation on the Managed Node
- Management Server Architecture
- Event Correlation in Operations with Designer
- Configuring a Template for use by ECS
- Deploying the ECS Agent Template
- Enabling the Server MSI
- Using hp Correlation Composer Software
- ECS Composer - Introduction
- How Composer works with ECS
- Composer Tasks
- Correlation Composer Workflow
- OSSPI Correlators
- Important Files for Event Correlation
- ECS Troubleshooting: Infrastructure
Introduction to Event Reduction
- Describe the concept of ECS correlations and
how NNM processes event correlation
- List the forms of event reduction available in
NNM
- Compare operation of de-duplication and
pattern deletion with ECS and Composer
Configuring Event Correlation
- Describe the supplied correlations and their
usefulness
- Describe the operation of the internal
correlators
- Describe and configure event de-duplication
- Contrast PairWise correlation with event
pattern deletion
- Contrast event de-duplication with
RepeatedEvent correlation
- Manage, through the ECS Configuration GUI,
the standard ECS Correlations supplied with
HP NNM Software
- Modify correlation parameters to adjust their
operation
- Configure correlators shipped with NNM
Introduction to Correlation Composer Development
- List the concerns with using Composer
- Develop accurate and complete correlator
requirement specifications
- Translate a correlator requirement into a
design
- Start the Composer user interface
- Select the Composer template appropriate to
a problem description
- Create and organize Correlator Store files
- Configure Operator access to correlators
- Deploy a correlator
Creating a Basic Correlator
- Specify an Alarm Signature
- Specify an Advanced Filter
- Define a Suppress correlator
- Define a constant variable
- Look up variable data in a data store
- Access event varbinds from within a
correlator
Using Variables in Correlators
- Define an Enhance correlator
- Define a new event to be generated
- Combine strings to create a variable
- Create an Extract variable to get data
contained in a varbind
Using Additional Correlators
- Define a Rate correlator
- Specify a Message Key to link events
- Define a Repeated correlator
- Define a Transient correlator
Relating Events from Multiple Sources
- Define a Multi-Source correlator
- Differentiate between a set of events and
events that do not require a set
Using Callbacks and Built-In Functions
- Use a discard callback
- Pass parameters to a function
- Specify a Perl or C callback function
- Access a built-in function
Best Practices and Tips
- Analyze the Binary Event Store in an
environment to determine candidates for
event reduction
- Capture a stream of events for analysis
- Replay a stream of events for testing
- Trace operation of your developed correlator
- Debug correlators
Combining Correlators
- Describe how correlators work together to
accomplish an objective
Configuring syslog Messages for SNMP
- Give reasons for converting syslog messages
into SNMP traps
- Describe how NNM’s syslog conversion
software works with and without OVO
installed
- Recognize the default syslog to trap
mappings
- Configure specific syslog message patterns to
be mapped to SNMP traps
- Deploy a syslog configuration
|
Printable version
