Administrator's and User's Guide for SFM HP-UX 11i v3 April 2010

Table 6-9 Troubleshooting EVWEB (continued)
SolutionCauseProblem
To disable EMS logging events to syslog, complete the following
steps:
1. Delete the monitoring request using monconfig. Enter the
following command to delete the monitoring request:
# /etc/opt/resmon/lbin/monconfig
2. Select the delete option to delete the request.
(D)elete a monitoring request
3. The current monitor configuration is:
1) Send events generated by all monitors
with severity >= MAJOR WARNING to SYSLOG
2) Send events generated by all monitors
with severity >= INFORMATION to TEXTLOG
/var/opt/resmon/log/event.log
3) Send events generated by all monitors
with severity >= MAJOR WARNING to EMAIL root
4) Send events generated by monitors
/storage/events/disks/default
with severity > CRITICAL to SNMP
5) Send events generated by monitors
/storage/events/disks/default
with severity > MAJOR WARNING to SNMP
6) Send events generated by monitors
/system/events/ipmi_fpl
with severity = CRITICAL to SNMP
with comment:
no
7) Send events generated by monitors
/system/events/memory_ia64
/system/events/system_status
with severity = CRITICAL to SNMP
Enter number of monitoring request to delete
{(Q)uit,(H)elp} 1
4. Enter 1 to delete events with MAJOR WARNING severity.
5. To disable the email facility from EMS, delete the following
monitoring request using monconfig:
3) Send events generated by all monitors
with severity >= MAJOR WARNING to EMAIL
root
The syslog functionality
is available from SFM
Version C.06.00.07.01,
September 2009 release,
to provide a summary
of event information of
critical and serious
events. The default
subscription to syslog
HP_defaultSyslog is
configured. When
events with major or
critical levels are
detected at SFM diag
mode, an event is sent
to the EMS framework
through the WBEM
Wrapper Monitor or the
EMS Wrapper Monitor.
EMS is configured to log
events with Major
Warning, Serious or
Critical severity levels
to the syslog. Even after
switching to the EMS
mode, the same
behavior occurs.
Both EMS and SFM log
the same symptom in the
syslog.
Install HP Operations Manager Software for UNIX agent
(HTTPS) on HP-UX. Configure a policy used by HTTPS agent
to monitor WBEM indications logged in syslog as follows:
MMM DD HH:MM:SS xxxxx CIM Indication (default
format):ProviderName =
SEL02_IndicationProvider, PerceivedSeverity =
2, EventID = 103
MMM DD HH:MM:SS xxxxx CIM Indication (default
format):EventID = 8, PerceivedSeverity = 2,
ProviderName = StateChangeIndicationProvider
For more information, see the HP Operations Manager Software
for UNIX documentation.
SFM does not provide
the same functionality
as EMS
The OpCmsg notification
is not available in SFM
104 Troubleshooting SFM