Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Message Record -Domain/Node with wild card 2

Status
Not open for further replies.

techpearl

IS-IT--Management
Dec 3, 2002
25
SG
Hi,
I would like to trap message from specified group of servers. All those servers have "IE" characters in their name.

Can wild card be used in the message record -detail in this way:
Domain\Node: *IE*

Pls help.Thanks
 
Beside, is that possible to list few nodes in the domain\node field?
for example the msg record apply to server01, server10, server23.

pls help. thanks
 
You can use wildcards eg lon-ks-sun*
But you can't list.
 
Hi JonnoGT,

Thanks for your valuable feedback. Any possible solution to group servers which have no similar name (server name=ABC, DEF etc)?

Beside,What if I have the senario like this:

1.Msg ID A with Domain node =server0*
2.Msg ID A with Domain node = (empty, didn't specific any node).

Is that all servers beside server0* will trigger 2.Msg ?
 
CA will search for the most specific match - so yes,
A message from server0* would be picked up by MSG ID 1, a message from any other server would be picked up by MSG ID 2.

The only way I can think to do it with a group of servers is to use the TEST message action.
EG: Have a generic msg record.
Do a test as the first action to find out what Node it is:
Action = TEST
Text = ( &NODEID = ABC -o &NODEID = DEF )
(The -o means "or")
If it finds a match it will send a 0 Return Code.

So for the next action do an EXIT with Condition Opcode = NE and return Code = 0.
Hence - if the node is not either ABC or DEF it will exit, if it is it will skip this action and continue to the next.

I'll post an example for you
 
Sorry it's so long!! Here's one we do that does different escalation depending on which agent has alerted etc. TEST is a really good way of cutting down on the number of MSG records that you have.

define msgrec
msgid="Host:WindowsNT_Server WindowsNT_Server * * * * Critical *"
type="MSG"
msgnode="*"
desc="Agent Critical Message From Geneva"
cont='N'
msgact='Y'
wcsingle='?'
wcmany='*'
case="y"
regexp="n"
node=&quot;<nodename removed!>&quot;
define msgact
name=(*,10)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &3 = SysAgtNT )&quot;
define msgact
name=(*,20)
action=&quot;GOTO&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;100&quot;
define msgact
name=(*,30)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &3 = SQLServerAgt )&quot;
define msgact
name=(*,40)
action=&quot;GOTO&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;300&quot;
define msgact
name=(*,100)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntMemPhys -o &5 = Agent:SysAgtNT:ntMemLoad -o &5 = Agent:SysAgtNT:ntMemSwap )&quot;
define msgact
name=(*,110)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER &8 &9 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,120)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntEventLogInst )&quot;
define msgact
name=(*,130)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER NT Event Log Error detected on Node - &NODEID : &TIME8 &DATED. Detail = &8 &9 &10 &11 &12 &13 &14 &15 &16 &17 &18 &19 &20&quot;
define msgact
name=(*,140)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntFileInst )&quot;
define msgact
name=(*,150)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER File &8 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,160)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntProcessInst )&quot;
define msgact
name=(*,170)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER Process &8 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,180)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntProcessorInst )&quot;
define msgact
name=(*,190)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER Critical Processor Detected on Node - &NODEID : &TIME8 &DATED. Detail = &8 &9 &10 &11 &12 &13 &14 &15&quot;
define msgact
name=(*,200)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntRegistryInst )&quot;
define msgact
name=(*,210)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER Registry Error Detected on Node - &NODEID : &TIME8 &DATED. Detail = &8 &9 &10 &11 &12 &13 &14 &15&quot;
define msgact
name=(*,220)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntServiceInst )&quot;
define msgact
name=(*,230)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER Service &8 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,240)
action=&quot;TEST&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;( &5 = Agent:SysAgtNT:ntFileSysInst )&quot;
define msgact
name=(*,250)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot;EQ&quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER File System &8 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,290)
action=&quot;EXIT&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
define msgact
name=(*,300)
action=&quot;COMMAND&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
text=&quot;cawto GVA FATAL UNICENTER SQL Agent Reports that &8 &9 &10 &11 &12 &13 &14 is Critical on Node - &NODEID : &TIME8 &DATED&quot;
define msgact
name=(*,310)
action=&quot;EXIT&quot;
attrib=&quot;DEFAULT&quot;
color=&quot;DEFAULT&quot;
condop=&quot; &quot;
evaluate='Y'
quiet='N'
status=&quot;ACTIVE&quot;
sim='N'
 
Hello

If you enable regular expressions (Message records - Config tab), you can use them also in the Domain\Node field.
For example you can enter:
server10|server2*|server33
'|' means 'or'.
 
That's good stuff Izeds, I never knew that.
Cheers for the tip
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top