1.9 MTTRAPD Rules

The MTTRAPD Probe receives SNMP traps from the connector using an internal queue mechanism.

IMPORTANT:AppManager Connector for Netcool 7.4 or later uses the new OID 1.3.6.1.4.1.1691 to send SNMP traps and the new connector name NetIQ/IBM Tivoli Netcool Connector.

If you are using any filter on the older OID to receive SNMP traps from AppManager Connector for Netcool 7.2 or a previous version, modify the old OID to 1.3.6.1.4.1.1691 in the mttrapd.rules files after upgrading to AppManager Connector for Netcool 7.4 or later.

By default, the mttrapd.rules file is available in the following location:

  • On Microsoft Windows computers: $OMNIHOME\probes\win32\

  • On UNIX computers: $OMNIHOME/probes/platform

where $OMNIHOME is the installation path for IBM Netcool and platform is the name of the UNIX platform on which you have installed Netcool.

In the mttrapd.rules file, add the following content under the if (match($generic-trap, "6"))loop to ensure that the Netcool fields are mapped to the AppManager Event information:

@Identifier=$22    # <ConnectorID>       'Connector ID of trap source
@Node=$23          # <AM MachineName>    'Host that event originated from
@NodeAlias=$19     # <AM MachineName IP Address>'Host's IP address that event    #originated from
@Manager=$10       # <AM KS Name>        ' Knowledge script name
@Agent=$12         # <AM KSG Name>       ' Knowledge script group for this KS
@AlertGroup=$11    # <AM Category Name>  ' Category of the knowledge script
@AlertKey=$8   # <AM JobID>          ' ID of AppManager job that created the event
@Severity=$24 # <Mapped AM event Severity> 'The Netcool mapped severity defined by #Config UI
@Summary=$17   #<AM Short Event Message> ' Primary AM event message
@LastOccurrence=$27 #<AM LastOccurTime of Event> ' Last occurrence time of event #in UTC
@FirstOccurrence=$26 #<AM FirstOccurTime of Event> ' First occurrence time of event #in UTC
@Tally=$14 # <AM Event Count> ' The number of times the event has occurred in AM
update(@Tally)      # Update Alert with Event Count
@Type="0"        # Defaults to "Type Not Set"
@Class="40235"          # Set to NetIQ AppManager - DO NOT CHANGE
@Acknowledged=$25    # 0, 1, or 2 ' AM status mapped to its Netcool equivalent
@URL=$21 # <AM Web Console URL of Event>'Only set if AM Web Console is defined as #available
 
 #Mapping AppManager Acknowledged State to Netcool Acknowledged State
    if (match(@Acknowledged, "1"))
    {

      update(@Acknowledged)
    }
  
 #Mapping AppManager Closed State to Netcool Acknowledged State
    if (match(@Acknowledged, "2"))
      {

      update(@Acknowledged)
    }
  
  $AmStoreDetail=$3
  #Check if the user checked save to netcool details in connector Config Utility.
    if (match($AmStoreDetail, "1"))
    {
      #Mapping to Alert Details
      $ConnectorName=$1
      $ConnectorVersion=$2 
      $QDBName=$4
      $QDBHost=$5
      $ConnectorHost=$6
      $AMSeverity=$7
      $AMJobID=$8
      $AMEventID=$9
      $AMParentEventID=$28
      $AMKSName=$10
      $AMCategoryName=$11
      $AMKSGName=$12
      $AMFirstOccurTimeUTC=$16
      $AMLastOccurTimeUTC=$15
      $AMEventMsg=$17
      $NumAMAgentMsgs=$18
      $AMAgentMsg=$29
      $AMAgentMsg1=$30
      $AMAgentMsg2=$31
      $AMAgentMsg3=$32
      $AMAgentMsg4=$33
      $AMAgentMsg5=$34
      $AMAgentMsg6=$35
      $AMAgentMsg7=$36
      $AMAgentMsg8=$37
      
      #Sending the information to Alert Details
      details($ConnectorName,$ConnectorVersion,$QDBName,$QDBHost,$ConnectorHost, $AMCategoryName,$AMSeverity,$AMEventID,$AMParentEventID,$AMJobID,$AMKSName, $AMKSGName,$AMFirstOccurTimeUTC,$AMLastOccurTimeUTC,$AMEventMsg,$AMAgentMsg, $AMAgentMsg1,$AMAgentMsg2,$AMAgentMsg3,$AMAgentMsg4,$AMAgentMsg5,$AMAgentMsg6, $AMAgentMsg7,$AMAgentMsg8)
}

NOTE:

  • Do not modify the mappings. You can only change the order of the mappings. You might want to use the sample connectorInstallFolder\redist\mttrapd.rules file, which contains the complete configuration for the connector to work with MTTRAPD probe.

  • To disable the AppManager acknowledged events from forwarding to Netcool by the connector, comment out the lines in the mttrapd.rules file as follows:

    #if (match(@Acknowledged, "1"))
    #    {
    
    #      update(@Acknowledged)
    #    }
  • To disable the AppManager closed events from forwarding to Netcool by the connector, comment out the lines in the mttrapd.rules file as follows:

    #if (match(@Acknowledged, "2"))
    #    {
    
    #      update(@Acknowledged)
    #    }

By default, the mttrapd.props file is available in the following location:

  • On Microsoft Windows computers: $OMNIHOME\probes\win32\

  • On UNIX computers: $OMNIHOME/probes/plateform

where $OMNIHOME is the installation path for IBM Netcool and platform is the name of the UNIX platform on which you have installed Netcool.

In the mttrapd.props file, specify the same port number that was used to configure the connector, for example Port: 12345, so that the MTTRAPD Probe receives SNMP traps from the connector and events are displayed in the Netcool Event List.