Users Guide

Automation and Event Processing Rules | Alarms, Events, and Automation
OMNM 6.5.3 User Guide 325
10 Add the Escalation criteria extracting the following Syslog information for the Te 0/20
interface:
syslogText.0: 6w6d1h: S5000_22: %STKUNIT0-M:CP %IFMGR-5-ASTATE_DN:
Changed interface Admin state to down: Te 0/20
11 Provide the following information:
• Message Match Text use ASTATE_DN from the syslogText .
• Event Severity is the alarm severity for
syslogNotification::[Category]
• Message Pattern get from the given syslogText.0 , parse the port string ( Te 0/20 )
with
down: (.*)
• Category Template set up an event definition based on the Category name. The next
step creates an Extended Event Definition for this. For example, the next time this type
of syslog alarm arrives, it appears as
syslogNotification::[Category] in this
case
syslogNotification::STATE_DOWN .
• Message Template is the regular expression in this rule parses Message Pattern, %1 from
(.*) into syslogText
12 Apply the STATE_DN criteria.