Re: Event MIB Import Help

CJ <[email protected]>
Newsgroups gmane.network.opennms.install
Message-ID <CAApeYuNcq5CBQ=Mm74QEWyR_FiXwQTCKQkNLW+AV-J9=vxvA5Q@mail.gmail.com> 
On Mon, Jun 10, 2013 at 9:33 PM, Chris L <[email protected]> wrote:

> On Jun 10, 2013, at 7:44 PM, Ron Roskens wrote:
>
> > CJ,
> >
> > Where in the eventconf.xml did you add the line? After the
> events/default.events.xml line? If so, move it in front of that line and
> restart.
> >
> > Ron
>
> Ron -
>
> I put it alphabetically.  I saw the note on the wiki page I was following
> that the default entry has to be the last one.
>
> Thanks.
>
>
> > On 6/10/2013 7:58 PM, CJ wrote:
> >> Hi all -
> >>
> >> Does anyone have time to take a quick look at this mib xml to see if
> they can easily tell me why my events are still coming in as unformatted?
> >>
> >> Here's a sample event:
> >>
> >> Received unformatted enterprise event
> (enterprise:.1.3.6.1.4.1.25053.2.2.1 generic:6 specific:60). 11 args:
> .1.3.6.1.4.1.25053.2.2.2.15="54:26:96:14:ec:f8"
> .1.3.6.1.4.1.25053.2.2.2.18="24:c9:a1:03:08:a0"
> .1.3.6.1.4.1.25053.2.2.2.23="SP Events" .1.3.6.1.4.1.25053.2.2.2.1="59"
> .1.3.6.1.4.1.25053.2.2.2.2="921323000870"
> .1.3.6.1.4.1.25053.2.2.2.3="normal"
> .1.3.6.1.4.1.25053.2.2.2.4="environment" .1.3.6.1.4.1.25053.2.2.2.6="1"
> .1.3.6.1.4.1.25053.2.2.2.5="Tue Jun 11 01:36:49 2013"
> .1.3.6.1.4.1.25053.2.2.2.7="Client joined"
> .1.3.6.1.4.1.25053.2.2.2.8="User[54:26:96:14:ec:f8] joins WLAN[SP Events]
> from AP[edr-7372@24:c9:a1:03:08:a0]"
> >>
> >> Here's my mib2opennms-converted xml file.
> >>
> >> http://pastebin.com/SvW7JLKA
> >>
> >> I have added the file to eventconf.xml and run:
> >>
> >> /usr/share/opennms/bin/send-event.pl
> uei.opennms.org/internal/eventsConfigChange
> >>
> >> And restarted opennms for good measure.
> >>
> >> Thanks a lot.
>

Okay.  I've been looking more at this and would like to focus on a Ruckus
ClientJoin Event.

Here's the MIB I imported with mib2opennms:

     http://pastebin.com/ZGfth4ZR

Here's the event from the converted MIB:

<event>
    <mask>
        <maskelement>
            <mename>id</mename>
            <mevalue>.1.3.6.1.4.1.25053.2.2</mevalue>
        </maskelement>
        <maskelement>
            <mename>generic</mename>
            <mevalue>6</mevalue>
        </maskelement>
        <maskelement>
            <mename>specific</mename>
            <mevalue>60</mevalue>
        </maskelement>
    </mask>
    <uei>uei.opennms.org/mib2opennms/ruckusZDEventClientJoin</uei>
    <event-label>RUCKUS-ZD-EVENT-MIB defined trap event:
ruckusZDEventClientJoin</event-label>
    <descr>
<![CDATA[
<p>Triggered when a client join a AP success.
The client's MAC address, AP's MAC address and SSID are enclosed.</p><table>
    <tr><td><b>

    ruckusZDEventSerial</b></td><td>
    %parm[#1]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventNEID</b></td><td>
    %parm[#2]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventSeverity</b></td><td>
    %parm[#3]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventType</b></td><td>
    %parm[#4]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventTime</b></td><td>
    %parm[#5]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventStatus</b></td><td>
    %parm[#6]%;</td><td><p>
        raise(1)
        clear(2)
    </p></td></tr>
    <tr><td><b>

    ruckusZDEventTitle</b></td><td>
    %parm[#7]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventClientMacAddr</b></td><td>
    %parm[#8]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventAPMacAddr</b></td><td>
    %parm[#9]%;</td><td><p></p></td></tr>
    <tr><td><b>

    ruckusZDEventSSID</b></td><td>
    %parm[#10]%;</td><td><p></p></td></tr></table>
]]>
    </descr>
        <logmsg dest='logndisplay'><![CDATA[<p>
            ruckusZDEventClientJoin trap received
            ruckusZDEventSerial=%parm[#1]%
            ruckusZDEventNEID=%parm[#2]%
            ruckusZDEventSeverity=%parm[#3]%
            ruckusZDEventType=%parm[#4]%
            ruckusZDEventTime=%parm[#5]%
            ruckusZDEventStatus=%parm[#6]%
            ruckusZDEventTitle=%parm[#7]%
            ruckusZDEventClientMacAddr=%parm[#8]%
            ruckusZDEventAPMacAddr=%parm[#9]%
            ruckusZDEventSSID=%parm[#10]%</p>
]]>        </logmsg>
    <severity>Indeterminate</severity>
</event>

Here is a sample eventd.log debug:

2013-06-12 11:40:00,025 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl: Event {
2013-06-12 11:40:00,025 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   uuid  = <not-set>
2013-06-12 11:40:00,025 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   uei   =
uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,025 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   src   = trapd
2013-06-12 11:40:00,025 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   iface = 172.21.199.67
2013-06-12 11:40:00,026 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   time  = Wednesday, June 12, 2013 6:40:00 PM GMT
2013-06-12 11:40:00,026 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   parms {
2013-06-12 11:40:00,026 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.1.2.15,
54:26:96:14:ec:f80)
2013-06-12 11:40:00,026 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   }
2013-06-12 11:40:00,026 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl: }
2013-06-12 11:40:00,037 DEBUG [EventHandlerPool-fiber2] EventConfData:
Match found using key: EventKey
[
    generic    = [6]

]

2013-06-12 11:40:00,037 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
JdbcEventWriter: processing
uei.opennms.org/generic/traps/EnterpriseDefaultnodeid: 26 ipaddr:
172.21.199.67 serviceid: null time: Wednesday, June 12,
2013 6:40:00 PM GMT
2013-06-12 11:40:00,039 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
DBID: 2135
2013-06-12 11:40:00,042 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
SUCCESSFULLY added uei.opennms.org/generic/traps/EnterpriseDefault related
data into the EVENTS table.
2013-06-12 11:40:00,043 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
EventWriter finished for : uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,043 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Event ID 2135 to be broadcasted:
uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,044 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2135 to listener thread:
Actiond:BroadcastEventProcessor
2013-06-12 11:40:00,044 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2135 to listener thread:
Notifd:BroadcastEventProcessor
2013-06-12 11:40:00,044 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2135 to listener thread:
Scriptd:BroadcastEventProcessor
2013-06-12 11:40:00,044 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2135 to listener thread: Alarmd
2013-06-12 11:40:00,044 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: No listener interested in event ID 2135:
uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl: Event {
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   uuid  = <not-set>
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   uei   =
uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   src   = trapd
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   iface = 172.21.199.9
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   time  = Wednesday, June 12, 2013 6:40:00 PM GMT
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   parms {
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.15,
54:26:96:14:ec:f8)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.18,
24:c9:a1:03:08:a0)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.23, SP MIS Test)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.1, 53)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.2, 921323000870)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.3, normal)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.4, environment)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.6, 1)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.5, Wed Jun 12
19:40:07 2013)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.7, Client joined)
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:     (.1.3.6.1.4.1.25053.2.2.2.8,
User[54:26:96:14:ec:f8] joins WLAN[SP MIS Test] from AP[edr-7372@24
:c9:a1:03:08:a0])
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl:   }
2013-06-12 11:40:00,230 DEBUG [EventHandlerPool-fiber2]
DefaultEventHandlerImpl: }
2013-06-12 11:40:00,242 DEBUG [EventHandlerPool-fiber2] EventConfData:
Match found using key: EventKey
[
    generic    = [6]

]

2013-06-12 11:40:00,242 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
JdbcEventWriter: processing
uei.opennms.org/generic/traps/EnterpriseDefaultnodeid: 25 ipaddr:
172.21.199.9 serviceid: null time: Wednesday, June 12,
2013 6:40:00 PM GMT
2013-06-12 11:40:00,243 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
DBID: 2136
2013-06-12 11:40:00,247 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
SUCCESSFULLY added uei.opennms.org/generic/traps/EnterpriseDefault related
data into the EVENTS table.
2013-06-12 11:40:00,248 DEBUG [EventHandlerPool-fiber2] JdbcEventWriter:
EventWriter finished for : uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,248 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Event ID 2136 to be broadcasted:
uei.opennms.org/generic/traps/EnterpriseDefault
2013-06-12 11:40:00,248 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2136 to listener thread:
Actiond:BroadcastEventProcessor
2013-06-12 11:40:00,248 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2136 to listener thread:
Notifd:BroadcastEventProcessor
2013-06-12 11:40:00,248 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2136 to listener thread:
Scriptd:BroadcastEventProcessor
2013-06-12 11:40:00,249 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: Queued event ID 2136 to listener thread: Alarmd
2013-06-12 11:40:00,249 DEBUG [EventHandlerPool-fiber2]
EventIpcManagerDefaultImpl: No listener interested in event ID 2136:
uei.opennms.org/generic/traps/EnterpriseDefault


Now, when I change this:

      <maskelement>
            <mename>id</mename>
            <mevalue>.1.3.6.1.4.1.25053.2.2</mevalue>
        </maskelement>

To this:

      <maskelement>
            <mename>id</mename>
            <mevalue>.1.3.6.1.4.1.25053.2.2.1</mevalue>
        </maskelement>

eventd sees the trap and gives me this:

uei.opennms.org/mib2opennms/ruckusZDEventClientJoin

ruckusZDEventClientJoin trap received ruckusZDEventSerial=54:26:96:14:ec:f8
ruckusZDEventNEID=24:c9:a1:03:08:a0 ruckusZDEventSeverity=SP MIS Test
ruckusZDEventType=47 ruckusZDEventTime=921323000870
ruckusZDEventStatus=normal ruckusZDEventTitle=environment
ruckusZDEventClientMacAddr=1 ruckusZDEventAPMacAddr=Wed Jun 12 19:28:37
2013 ruckusZDEventSSID=Client joined


Awesome...
Is there something I am doing wrong with mib2opennms or is the MIB from
Ruckus hosed?  Sorry, I'm pretty new to SNMP traps.

I used:

 mib2opennms -w -6 -m /usr/share/mins/ietf RUCKUS-ZD-EVENT-MIB.txt >
RUCKUS-ZD-EVENT-MIB.events.xml

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/index.php/Mailing_List_FAQ

opennms-install mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-install
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.