User Guide for Cisco Unified Operations Manager 2.0.3
Events Processed
Downloads: This chapterpdf (PDF - 327.0KB) The complete bookPDF (PDF - 23.65MB) | Feedback

Events Processed

Table Of Contents

Events Processed

Obsolete Events


Events Processed


Table E-1 lists all possible events you might see on a Monitoring Dashboard, along with the following:

Description —A summary of the event, including typical causes (if known).

Trigger —How Cisco Unified Operations Manager (Operations Manager) learns of the event: from normal polling, a threshold that was exceeded, a diagnostic test result, a trap that was received, or an event received from Windows Event Manager. For a list of thresholds and events that they trigger, see Table 18-14.

Severity —The severity that Operations Manager assigns to the event: critical, warning, or informational.

Device Type —The devices, as classified in Operations Manager, on which the event can occur.

Event Code —The code used by Notifications to track changes to default Operations Manager event names using the Notification event customization feature. (For more information, see Customizing Events, page 15-19.)

Some events are no longer available for monitoring and have been obsoleted. See Obsolete Events for a list. If you use any of these obsoleted events, refer to the equivalent events that can be used instead of the obsoleted ones.

Events listed in Table E-1 are displayed on:

The Alert Details page—Shows the majority of events generated. Event names correspond to those displayed in the Description column of the Alert Details page.

The Phone Activities display—Shows information about the IP phones in your network that have become disconnected from the switch, are no longer registered to a Cisco Unified Communications Manager, or have gone into SRST mode. The following events cause activity to be displayed on the Phone Activities display:

SRSTEntered

SRSTSuspected

The Service Quality Alerts display—Shows events generated as a result of traps received from Service Monitor. The following events cause activity to be displayed on the Service Quality Alerts display:

CriticalServiceQualityIssue

MultipleServiceQualityIssue

ServiceQualityIssue


Note The Cisco1040SensorDown event is also generated as a result of traps received from Service Monitor. However, Cisco1040SensorDown appears under Unidentified Trap.


Table E-1 Events that Operations Manager Supports 

Event
Description, Cause, Severity and Event Code

ActivePortThresholdExceeded

Description: Outbound busy attempts exceeded on Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2059.

ApplicationDown

Description: Application can run but is not running due to some problem in the application or device.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2001.

ApplicationPartiallyRunning

Description: The application can run but is waiting, due to some problem in the application or device (for example, lack of CPU resources).

Trigger: Polling.

Severity: Warning.

Device Type: Media Server.

Event Code: 2002.

AvailableInboxLicenseLow

Description: Number of available inbox licenses are fewer than the threshold.

Trigger: Fell below Unity Inbox License Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2103.

AvailableLicenseLow

Description: The number of available Unity licenses are fewer than the threshold.

Trigger: Fell below Unity License Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2104.

AverageLatency_ThresholdExceeded

Description: The average latency for a node-to-node UDP Jitter for VoIP test exceeds the threshold set for the test.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4004

BackupActivated

Description: Backup port or interface has come online, indicating that the port or interface it backs up has gone down.

Trigger: Polling.

Severity: Warning.

Device Type: Host, Hub, Router, Optical Switch, or Switch.

Event Code: 1000.

CallManagerDown

Description: Cisco Unified Communications Manager can run but is not running due to some problem in the application or device.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2006.

For Cisco Unified Communications Manager Express, see CCMEDown.

CCMCDRFilesBackupFailed

Description: Copying of Cisco Unified Communications Manager call detail records (CDRs) from subscriber to publisher failed.

Trigger: WMI event.

Severity: Critical.

Device Type: Media Server.

Event Code: 2093.

CCMEDown

Description: The Cisco Unified Communications Manager Express application is down. This could be due to some problem in the application or device.

Trigger: Polling.

Severity: Critical.

Device Type: Router.

Event Code: 2038.

For Cisco Unified Communications Manager, see CallManagerDown.

CCMEEphoneDeceased

Description: The state of an ephone registered to Cisco Unified Communications Manager Express changed to deceased.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2076.

CCMEEphoneLoginFailed

Description: An ephone login to Cisco Unified Communications Manager Express was rejected or failed.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2078.

CCMEEphoneRegistrationFailed

Description: An ephone attempted to register with Cisco Unified Communications Manager Express and failed.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2077.

CCMEEphoneUnregistrationsExceeded

Description: The number of ephones registered to Cisco Unified Communications Manager Express was exceeded.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Router or VoiceGateway.

Event Code: 2075.

CCMEKeyEphoneRegistrationChange

Description: Registration status changed for a key IP ephone with respect to Cisco Unified Communications Manager Express.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2080.

CCMELivefeedMOHFailed

Description: Music on hold (MOH) live feed failed on Cisco Unified Communications Manager Express.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2074.

CCMEMaximumConferencesExceeded

Description: Maximum number of simultaneous three-party conferences supported was exceeded on Cisco Unified Communications Manager Express.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2073.

CCMENightServiceChange

Description: Night service status changed on an ephone registered to Cisco Unified Communications Manager Express.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Router or VoiceGateway.

Event Code: 2079.

CCMEStatusChange

Description: Cisco Unified Communications Manager Express enabled state has changed.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2072.

CCMHttpServiceDown

Description: HTTP service cannot be used to communicate to all Cisco Unified Communications Managers in the cluster. This might be due to the following:

The web service for all Cisco Unified Communications Managers in the cluster is down.

The credentials (username, password) for at least one of the running web services were not found or are incorrect.

Trigger: Polling.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 2009.

CCMHttpServiceInaccessible

Description: Several successive attempts to contact a Cisco Unified Communications Manager cluster have been unsuccessful. Might be due to the following:

Excessive number of requests on the Cisco Unified Communications Manager.

Heavy load on the CPU or Cisco Unified Communications Manager.

Trigger: Polling. (See Determining when to Issue a CCMHttpServiceInaccessible Event, page F-2.)

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 2010.

CCMLineLinkDown

Description: Attendant Console not receiving the line link state information from Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2089.

Cisco1040SensorDown

Description: A Cisco 1040 has stopped responding to keepalives from Service Monitor.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Unidentified Trap (because Operations Manager does not monitor Cisco 1040.)

Event Code: 8004.

Note This event appears on the Alert Details page and can be generated only when you have a licensed copy of Service Monitor.

CiscoCCMAttendantConsoleHeartBeatExceeded

Description: Cisco Unified Communications Manager Attendant Console heartbeat is below the threshold value.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2082.

CiscoMessagingInterfaceHeartBeatExceeded

Description: Cisco Messaging Interface heartbeat is below the threshold value.

Trigger: Exceeded Messaging Interface Heartbeat threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2083.

CiscoTftpHeartBeatExceeded

Description: Cisco TFTP Service heartbeat is below the threshold value.

Trigger: Exceeded TFTP Heartbeat Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2081.

CodeRedStateEntered

Description: Cisco Unified Communications Manager has entered Code Red state (call throttling mode).

Trigger: Polling.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 2048.

CodeYellowStateEntered

Description: Cisco Unified Communications Manager has entered Code Yellow State (call throttling mode).

Trigger: Polling.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 2049.

ComponentDown

Description: A component within IPCC is down.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2039

ConnectionToDistributorFailed

Description: A Cisco Unified Communications Manager cannot connect with a distributor.

Trigger: WMI event.

Severity: Critical.

Device Type: Media Server.

Event Code: 2092.

CPALoginFailureThresholdExceeded

Description: The number of failed Cisco Personal Assistant logins that exceeded the limit.

Trigger: Exceeded the CPA Login Failure threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2086.

CPATransferFailedThresholdExceeded

Description: Number of times that Cisco Personal Assistant tried and failed to transfer a call.

Trigger: Exceeded the CPA Transfer Failed threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2087.

CPAVoicemailThresholdExceeded

Description: The number of times callers tried to access voice mail but failed, or the number of voicemail login failures that exceeded the limit.

Trigger: Exceeded the CPA Voice Mail threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2088.

cpuUtilizationExceeded

Description: CPU utilization of the voice service or the system exceeded the limit.

Trigger: Exceeded the CPU Utilization threshold.

Severity: Warning.

Device Type: Media Server.

Event Code: 2085.

CriticalServiceQualityIssue

Description: Operations Manager has received a MOS violation trap from Service Monitor and MOS has fallen below the value set on the Event Settings page. See Configuring Service Quality Event Settings, page 20-9.

Trigger: Event settings. See Configuring Service Quality Event Settings, page 20-9.

Severity: Critical.

Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.

Event Code: 8002.

Note This event is displayed on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.

CTIDeviceNotRegistered

Description: Cisco Communications Manager CTI device has not gone into the Registered state.

Trigger: When CTI device does not go to the Registered state.

Severity: Critical.

Device Type: MediaServer.

Event Code: 2107.

CTILinkDown

Description: An active link between CTI Manager and Cisco Unified Communications Manager, is down.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2096.

CUEApplicationStatusChange

Description: An application on Cisco Unity Express has come online or gone offline.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router.

Event Code: 2063.

CUEBackupFailed

Description: Cisco Unity Express backup failed.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Router.

Event Code: 2068.

CUECCMConnectionLost

Description: Cisco Unity Express has lost connection with Cisco Unified Communications Manager.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Router.

Event Code: 2066.

CUENTPIssue

Description: Cisco Unity Express is affected by a problem with NTP.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router.

Event Code: 2069.

CUEResourceExhausted

Description: A Cisco Unity Express resource has been exhausted.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Router.

Event Code: 2067.

CUESecurityIssue

Description: Cisco Unity Express is affected by a problem with security.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router.

Event Code: 2064.

CUEStorageIssue

Description: Cisco Unity Express is affected by a problem with storage.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router.

Event Code: 2065.

DataPhysicalDiskDown

Description: Drive down on Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2060.

DBReplicationFailure

Description: A subscriber in a Cisco Unified Communications Manager cluster experienced a failure while replicating the data to the publisher database. This event needs to be manually cleared to delete it.

Trigger: WMI event.

Severity: Critical.

Device Type: Media Server.

Event Code: 2091.

DPAPortCallManager
LinkDown

Description: No connectivity between the DPA port and Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Voice Mail Gateway.

Event Code: 2013.

DPAPortTelephonyLinkDown

Description: No connectivity between the DPA port and Octel voice mail.

Trigger: Polling.

Severity: Critical.

Device Type: Voice Mail Gateway.

Event Code: 2014.

Duplicate

Description: Same IP address is configured on multiple managed systems.

Trigger: Polling (often during rediscovery).

Severity: Critical.

Device Type: Host, Hub, Router, Optical Switch, or Switch.

Event Code: 1001.

ExceededMaximumUptime

Description: A backup or dial-on-demand port or interface has been in the Up state for too long.

Trigger: Exceeded Maximum Up Time threshold.

Severity: Critical.

Device Type: Router, Optical Switch, or Switch.

Event Code: 1002.

ExcessiveDAFaults

Description: The number of drive array faults has exceeded a threshold on a Compaq system running a Cisco Unified Communications application.

Trigger: Exceeded Drive Array Faults Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2100.

ExcessiveFragmentation

Description: System memory is highly fragmented.

Trigger: Exceeded Memory Fragmentation Threshold.

Severity: Critical.

Device Type: Host, Router, Switch, or Optical Switch.

Event Code: 1003.

ExcessiveTFTPRequestsAborted

Description: A Cisco Unified Communications Manager has received a TFTP alarm indicating that TFTP requests are now being denied.

Trigger: Exceeded TFTP Aborted Requests Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2095.

FanDegraded

Description: Fan condition is Degraded.

Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Media Server or Voice Gateway.

Event Code: 2015.

FanDown

Description: Fan condition is Down.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Media Server or Voice Gateway.

Event Code: 2016.

Flapping

Description: Port or interface is repeatedly alternating between Up and Down states over a short period of time. Operations Manager issues this event by monitoring the number of link downs received within the link window for a particular network adapter (using the Link threshold and Link Window parameters).

Trigger: Exceeded Link Trap Threshold for Link Trap Window; or processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Host, Hub, Router, Optical Switch, or Switch.

Event Code: 1004.

GatekeeperLostContact
WithCluster

Description: Voice gatekeeper lost registration with a Cisco Unified Communications Manager cluster.

Trigger: Polling.

Severity: Critical.

Device Type: Gatekeeper.

Event Code: 2017.

GatewayLostContact
WithCluster

Description: Voice gateway lost registration with a Cisco Unified Communications Manager cluster.

Trigger: Polling.

Severity: Critical.

Device Type: Digital Voice Gateway or Voice Gateway.

Event Code: 2018.

HardwareConferenceOutOfResources

Description: Hardware conference bridge registered with Cisco Unified Communications Manager is out of resources.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2056.

HeartBeatThresholdExceeded

Description: Cisco Unified Communications Manager heartbeat is over the threshold value.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2051.

HighAnalogPortUtilization

Description: Percentage utilization of an analog port has exceeded a threshold.

Trigger: Exceeded one of these thresholds:

Cisco Unified Communications Manager Analog Port Utilization

FXS Port Utilization Threshold

FXO Port Utilization Threshold

MGCP Gateway Analog Port Utilization

FXS Port Utilization Threshold

FXO Port Utilization Threshold

H323 Gateway Analog Port Utilization

FXS Port Utilization Threshold

FXO Port Utilization Threshold

EM Port Utilization Threshold.

Note You must enable polling for Voice Utilization Settings to monitor this event.

Severity: Critical.

Device Type: Media Server or Voice Gateway.

Event Code: 4100.

HighBackplaneUtilization

Description: Utilization of the backplane's bandwidth exceeds the backplane utilization threshold.

Trigger: Exceeded Backplane Utilization Threshold.

Severity: Critical.

Device Type: Host, Router, Switch, or Optical Switch.

Event Code: 1005.

HighBroadcastRate

Description: Input packet broadcast percentage exceeds the Broadcast threshold. The input packet broadcast percentage calculates the percentage of total capacity that was used to receive broadcast packets.

Trigger: Exceeded Broadcast Threshold.

Severity: Critical.

Device Type: Host, Router, Switch, or Optical Switch.

Event Code: 1006.

HighBufferMissRate

Description: Rate of buffer misses exceeds the Memory Buffer Miss Threshold.

Trigger: Exceeded Memory Buffer Miss Threshold.

Severity: Critical.

Device Type: Host, Router, Switch or Optical Switch.

Event Code: 1007.

HighBufferUtilization

Description: Number of buffers used exceeds the Memory Buffer Utilization Threshold.

Trigger: Exceeded Memory Buffer Utilization Threshold.

Severity: Critical.

Device Type: Host, Router, Switch, or Optical Switch.

Event Code: 1008.

HighCapacityUtilization

Description: Percentage of voicemail minutes used in Cisco Unity Express exceeds the Capacity Utilization Threshold.

Trigger: Exceeded Capacity Utilization Threshold.

Severity: Critical.

Device Type: Router.

Event Code: 2045

HighCollisionRate

Description: Rate of collisions exceeds the Collision Threshold.

Trigger: Exceeded Collision Threshold.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1009.

HighDigitalPortUtilization

Description: Percentage utilization of a digital port has exceeded a threshold.

Trigger: Exceeded one of these thresholds:

Cisco Unified Communications Manager Digital Port Utilization

BRI Channel Utilization Threshold

T1 PRI Channel Utilization Threshold

E1 PRI Channel Utilization Threshold

T1 CAS Channel Utilization Threshold

MGCP Gateway Digital Port Utilization

BRI Channel Utilization Threshold

T1 PRI Channel Utilization Threshold

E1 PRI Channel Utilization Threshold

T1 CAS Channel Utilization Threshold

H323 Gateway Digital Port Utilization

BRI Channel Utilization Threshold

T1 PRI Channel Utilization Threshold

E1 PRI Channel Utilization Threshold

T1 CAS Channel Utilization Threshold

E1 CAS Channel Utilization Threshold

Note You must enable polling for Voice Utilization Settings to monitor this event.

Severity: Critical.

Device Type: Media Server or Voice Gateway.

Event Code: 4101.

HighDiscardRate

Description: A HighDiscardRate event occurs when:

The input packet queued rate is greater than the minimum packet rate, and the input packet discard percentage is greater than the Discard Threshold. The input packet queued rate is the rate of packets received without error. The input packet discard percentage is calculated by dividing the rate of input packets discarded by the rate of packets received.

The output packet queued rate is greater than the minimum packet rate, and the output packet discard percentage is greater than the Discard Threshold. The output packet queued rate is the rate of packets sent without error. The output packet discard percentage is calculated by dividing the rate of output packets discarded by the rate of packets sent.

Trigger: Exceeded Discard Threshold.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1010.

HighErrorRate

Description: A HighErrorRate event occurs for input or output packets when both of the following thresholds are exceeded:

Error Threshold—Percentage of packets in error

Error Traffic Threshold—Percentage of bandwidth in use

Trigger: Exceeded Error Threshold and equaled or exceeded Error Traffic Threshold.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1011.

HighPortUtilization

Description: Percentage of port utilization exceeds a threshold.

Note You must enable polling for Voice Utilization Settings to monitor this event.

Trigger: Exceeded one of these thresholds:

Voice Mail Gateway Port Utilization

Voice Mail Port Utilization Threshold

PBX Port Utilization Threshold

Cisco Unity and Cisco Unity Connection Port Utilization

Active InBound Ports Threshold

Active OutBound Ports Threshold

Severity: Critical.

Device Type: Media Server or Voice Mail Gateway.

Event Code: 4102.

HighPriorityQueueFull

Description: The number of high priority signals in the Cisco Unified Communications Manager queue has exceeded the High Priority Queue Size Threshold.

Note A large number of high priority events can cause degraded performance on Cisco Unified Communications Manager, resulting in slow call connection or loss of dial tone. For more information, see Cisco Unified Communications Manager documentation.

Trigger: Exceeded High Priority Queue Size Threshold.

Severity: Warning.

Device Type: Media Server.

Event Code: 2099.

HighQueueDropRate

Description: Number of packets discarded due to input or output queue overflow exceeding the Queue Drop Threshold. The input (or output) queue overflow is derived by dividing the number of packets designated to be sent (or received) that were discarded due to queue overflow, by the total number of packets in the queue.

Trigger: Exceeded Queue Drop Threshold.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1012.

HighResourceUtilization

Description: A hardware resource threshold has been exceeded.

Trigger: Exceeded one of these thresholds:

Cisco Unified Communications Manager Resource Utilization

MOH Multicast Resources Active Threshold

MOH Unicast Resources Active Threshold

MTP Resources Active Threshold

Transcoder Resources Active Threshold

Hardware Conference Resources Active Threshold

Software Conference Resources Active Threshold

Conferences Active Threshold

Conference Streams Active Threshold

MOH Streams Active Threshold

MTP Streams Active Threshold

Location Bandwidth Available Threshold

H323 Gateway Resource Utilization

DSP Utilization Threshold

Gatekeeper Resource Utilization

Total Bandwidth Utilization for Local Zone Threshold

Interzone Bandwidth Utilization for Local Zone Threshold

Cisco Unified Communications Manager Express Utilization

Registered IP Phones Threshold

Registered Key IP Phones Threshold

Cisco Unity Express Utilization

Capacity Utilization Threshold

Session Utilization Threshold

Orphaned Mailboxes Threshold

Note You must enable polling for Voice Utilization Settings to monitor this event.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster, Gatekeeper, Media Server, Router, or Voice Gateway.

Event Code: 4103.

HighRouteGroupUtilization

Description: Route group utilization in the cluster exceeds the configured threshold. For more information, see Cluster Utilization Settings, page 18-49.

Trigger: Exceeded the Route Group Utilization Threshold.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster

Event Code: 4104.

Note For Operations Manager to generate this event for a cluster, you must enable polling for Cluster Utilization Settings for that cluster. See Voice Utilization Settings—Polling, page 18-23.

HighRouteListUtilization

Description: Route list utilization in the cluster exceeds the configured threshold. For more information, see Cluster Utilization Settings, page 18-49.

Trigger: Exceeded the Route List Utilization Threshold.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster

Event Code: 4105.

Note For Operations Manager to generate this event for a cluster, you must enable polling for Cluster Utilization Settings for that cluster. See Voice Utilization Settings—Polling, page 18-23.

HighUtilization

Description: Current utilization exceeds the utilization threshold configured for this network adapter or processor.

Trigger: Exceeded one of these thresholds:

Utilization Threshold

Processor Utilization Threshold

Severity: Critical.

Device Type: Host, Media Server, Router, Switch, Optical Switch, or Voice Gateway.

Event Code: 1013.

IdeAtaDiskDown

Description: IDE/ATA drive down on Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2062.

InformAlarm

Description: An informational pass-through trap was generated.

Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.

Severity: Informational.

Event Code: 1014.

InsufficientFreeHardDisk

Description: Free disk space is low.

Trigger: Exceeded Free Hard Disk Threshold.

Severity: Critical.

Event Code: 2020.

Device Type: Media Server.

Also see InsufficientFreeMemory, InsufficientFreePhysicalMemory, InsufficientFreeVirtualMemory.

InsufficientFreeMemory

Description: System is running out of memory resources. Also reported if there has been a failure to allocate a buffer due to lack of memory.

Trigger: Exceeded Free Memory Threshold.

Severity: Critical.

Device Type: Host, Media Server, Router, Switch, or Optical Switch.

Event Code: 1015.

Also see InsufficientFreeHardDisk, InsufficientFreePhysicalMemory, InsufficientFreeVirtualMemory.

InsufficientFree
PhysicalMemory

Description: System is running out of physical memory resources.

Trigger: Exceeded Free Physical Memory Threshold.

Severity: Critical.

Device Type: Voice Gateway.

Event Code: 2021.

Also see InsufficientFreeHardDisk, InsufficientFreeMemory, InsufficientFreeVirtualMemory.

InsufficientFree
VirtualMemory

Description: System is running out of virtual memory resources.

Trigger: Exceeded Free Virtual Memory Threshold.

Severity: Critical.

Event Code: 2022.

Device Type: Media Server.

Also see InsufficientFreeHardDisk, InsufficientFreeMemory, InsufficientFreePhysicalMemory.

InterfaceOperationallyDown

Description: Interface is nonoperational.

Trigger: Polling.

Severity: Critical.

Device Type: Digital Voice Gateway, Media Server, or Voice Gateway.

Event Code: 2023.

Also see OperationallyDown.

IPCCNotification

Description: IPCC sent a notification.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Media Server.

Event Code: 2070.

JitterDS_ThresholdExceeded

Description: Jitter exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4008.

For more information, see Using Node-To-Node Tests, page 10-1.

JitterSD_ThresholdExceeded

Description: Jitter exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4007.

For more information, see Using Node-To-Node Tests, page 10-1.

LocationBWOutOfResources

Description: A call through a Cisco Unified Communications Manager location failed due to lack of bandwidth.

Trigger: Exceeded Location Out of Resources Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2094.

LostContactWithCluster

Description: Voice gateway, voice gatekeeper, voice port, or voice interface lost registration with a Cisco Unified Communications Manager cluster.

Trigger: Polling.

Severity: Critical.

Device Type: Voice Gateway (voice port, voice interface), Voice Mail Gateway (voice port), Digital Voice Gateway, Gatekeeper.

Event Code: 2035.

LowPriorityQueueFull

Description: The number of low priority signals in the Cisco Unified Communications Manager queue has exceeded the Low Priority Queue Size Threshold.

Note A large number of signals in this queue could result in delayed device registration. For more information, see Cisco Unified Communications Manager documentation.

Trigger: Exceeded Low Priority Queue Size Threshold.

Severity: Warning.

Device Type: Media Server.

Event Code: 2097.

MajorAlarm

Description: Critical pass-through trap was generated.

Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.

Severity: Informational.

Event Code: 1016.

MinorAlarm

Description: Significant pass-through trap was generated.

Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.

Severity: Informational.

Event Code: 1017.

MOHConnectionLost

Description: Cisco Unified Communications Manager music on hold connection lost.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2054.

MOHOutOfResource

Description: Cisco Unified Communications Manager out of music on hold resources.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2052.

MTPOutOfResource

Description: Cisco Unified Communications Manager out of media termination point resources.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2053.

MultipleServiceQualityIssue

Description: Operations Manager has generated a user-defined number of Service Quality Issue events in a user-defined number of minutes.

Trigger: Event settings. See Configuring Service Quality Event Settings, page 20-9.

Severity: Critical.

Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.

Event Code: 8003.

Note When this event occurs, Multiple Service Quality Issues is displayed in the status bar on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.

MWIOnTimeExceeded

Description: MWIOnTime value exceeded the threshold.

Trigger: Exceeded MWI on time threshold.

Severity: Warning.

Device Type: Media Server.

Event Code: 2024.

NicDown

Description: Network interface card down on an IPCC.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2040.

NodeToNodeTestFailed

Description: A node-to-node test failed.

Trigger: Node-to-node tests

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4000.

NormalPriorityQueueFull

Description: The number of normal priority signals in the Cisco Unified Communications Manager queue has reached the threshold size.

Trigger: Exceeded Normal Priority Queue Size Threshold.

Severity: Warning.

Device Type: Media Server.

Event Code: 2098.

OperationallyDown

Description: Interface—Card or network adapter's operational state is not normal. System Hardware—Disk's operational state is not normal.

Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).

Note For interfaces, Operations Manager will only generate an OperationallyDown clear event if the card is reinserted into the same slot, and if the module index is the same before and after the card is reinserted.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1018.

Also see CardDown, InterfaceOperationallyDown, VoiceCardDown.

OutboundBusyAttemptsThresholdExceeded

Description: Outbound busy attempts exceeded on Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2058.

OutofRange

Description: Device temperature or voltage is outside the normal operating range. When an OutofRange event is generated, you will normally also see fan, power supply, or temperature events.

Trigger: Exceeded one of these thresholds:

Relative temperature threshold

Relative voltage threshold

Severity: Critical.

Device Type: Host, Router, Switch, or Optical Switch.

Event Code: 1019.

PacketLossDS_ThresholdExceeded

Description: Packet loss exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4006.

For more information, see Using Node-To-Node Tests, page 10-1.

PacketLossSD_ThresholdExceeded

Description: Packet loss exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4005.

For more information, see Using Node-To-Node Tests, page 10-1.

PhoneReachabilityTestFailed

Description: Operations Manager cannot reach an IP phone. The IP phone has not responded to three or more successive pings from Operations Manager or the IP SLA device.

Trigger: Polling.

Severity: Critical.

Device Type: IP Phone.

Event Code: 9002.

PimDown

Description: IPCC Peripheral Interface Manager (PIM) down.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2041.

PortLostContactWithCluster

Description: Voice port lost registration with a Cisco Unified Communications Manager cluster.

Trigger: Polling.

Severity: Critical.

Device Type: Voice gateway.

Event Code: 2034.

PortsOutOfServiceThresholdExceeded

Description: Port on Cisco Unified Communications Manager out of service.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2050.

PowerSupplyDegraded

Description: Power supply state is Degraded.

Trigger: Polling.

Severity: Warning.

Device Type: Media Server or Voice Gateway.

Event Code: 2026.

PowerSupplyDown

Description: Power supply state is Down.

Trigger: Trap and polling.

Severity: Critical.

Device Type: Media Server or Voice Gateway.

Event Code: 2027.

QualityDroppedBelowThreshold

Description: Quality has fallen below the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4009.

For more information, see Using Node-To-Node Tests, page 10-1.

RegistrationResponseTime_Threshold
Exceeded

Description: Registration response time exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4003.

For more information, see Using Node-To-Node Tests, page 10-1.

RepeatedRestarts

Description: System repeatedly restarts over a short period of time. Operations Manager issues this event by monitoring the number of system cold and warm starts received within the restart window (using the Restart threshold and the RestartWindow parameters).

Trigger: Exceeded Restart Trap Threshold for Restart Trap Window; or processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1020.

Resumed

Description: Operations Manager resumes monitoring for a device or component that had previously been suspended from monitoring.

Trigger: User clicks Resume on the Detailed Device View for a device or component that was previously suspended from monitoring. Additionally, a user applies changes.

Severity: Critical.

Device Type: Any.

Event Code: 1024.

For more information, see Suspending/Resuming Devices, page 3-25, Suspending/Resuming a Device Component, page 3-26, and Applying Changes, page 18-57.

RingBackResponseTime_Threshold
Exceeded

Description: Ring-back response time exceeds the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4002.

For more information, see Using Node-To-Node Tests, page 10-1.

RoundTripResponseTime_Threshold
Exceeded

Description: Round trip response time fallen below the node-to-node test threshold.

Trigger: Node-to-node test.

Severity: Warning.

Device Type: Router or Switch.

Event Code: 4001.

For more information, see Using Node-To-Node Tests, page 10-1.

RouteGroupExhausted

Description: Route group utilization reached 100%. All gateways in the route group are fully utilized.

Trigger: Polling.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 4106.

Note For Operations Manager to generate this event for a cluster, you must enable polling for Cluster Utilization Settings for that cluster. See Voice Utilization Settings—Polling, page 18-23.

RouteGroupFailed

Description:When all Gateways in the RouteGroup are down.

Trigger: Polling.

Severity:

Device Type:

Event Code:

RouteListExhausted

Description: Route list utilization reached 100%. All route groups in the route list are fully utilized.

Trigger: Polling.

Severity: Critical.

Device Type: Cisco Unified Communications Manager or Cluster.

Event Code: 4107.

Note For Operations Manager to generate this event for a cluster, you must enable polling for Cluster Utilization Settings for that cluster. See Voice Utilization Settings—Polling, page 18-23.

RouteListFailed

Description:When all the Route Groups in the RouteList are down.

Trigger:Polling.

Severity:

Device Type:

Event Code:

SCSIControllerDown

Description: SCSI controller is down on a Compaq system.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2101.

SCSIDriveDown

Description: SCSI drive down on Cisco Unified Communications Manager.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2061.

ServiceDown

Description: Service can run but is not running, due to some problem in the service or device.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2019.

ServicePartiallyRunning

Description: The service can run but is waiting, due to some problem in the service or device (for example, lack of CPU resources).

Trigger: Polling.

Severity: Warning.

Device Type: Media Server.

Event Code: 2007.

Also see ApplicationDown.

ServiceQualityIssue

Description: Operations Manager has received a MOS violation trap from Service Monitor. This indicates that MOS has dropped below a threshold that is set in Service Monitor.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.

Event Code: 8001.

Note This event is displayed on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.

ServiceRestarted

Description: ServiceRestarted remains active for more than 24 hours. The event needs to be cleared manually.

Trigger: Cisco Unified Communications Manager service is restarted during a polling cycle.

Severity: Critical.

Device Type: Media Server.

Event Code: 2108.

SOAPNotReachable

Description: Device experienced Simple Object Access Protocol (SOAP) connectivity failure while polling. SOAP attributes will not be polled.

Trigger: Cisco Unified Communications Manager device experienced SOAP communication failure with the management application. CallManager may be overloaded or the web service may be down. Rediscover the device in Cisco Unified Operations Manager.

Severity: Critical.

Device Type: Media Server.

Event Code: 2109.

SoftwareConferenceOutOfResources

Description: Software conference bridge registered with Cisco Unified Communications Manager is out of resources.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2057.

SRSTEntered

Description: An IP telephony router is functioning in Survivable Remote Site Telephony (SRST) mode, performing call management for phones in place of the central Cisco Unified Communications Manager. The event is generated when a WAN link is down, preventing IP phone TCP keepalive messages from reaching the Cisco Unified Communications Manager.

Trigger: Polling (also see Table 19-1 on page 19-3).

Severity: Critical.

Device Type: Router, Switch, or Optical Switch.

Event Code: 9000

Note This event triggers activity on the Phone Activities monitoring dashboard.

SRSTRouterFailure

Description: A catastrophic failure occurred on an SRST router.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Router or VoiceGateway.

Event Code: 2071.

SRSTSuspected

Description: IP Phone Information Facility reports that all phones associated with the SRST router are unregistered, but the WAN link between phones and the central Cisco Unified Communications Manager is up.

Trigger: Polling.

Severity: Critical.

Device Type: Router, Switch, or Optical Switch.

Event Code: 9001

Note This event triggers activity on the Phone Activities monitoring dashboard.

StateNotNormal

Description: A fan, power supply, temperature sensor, or voltage sensor is not acting normally. When an OutofRange event is generated, you will also see a fan, power supply, or temperature event.

Trigger: Polling.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, or Optical Switch.

Event Code: 1021.

Suspended

Description: Operations Manager suspends monitoring of a device or component.

Trigger: User clicks Suspend on the Detailed Device View for a device or component.

Severity: Critical.

Device Type: Any.

Event Code: 1023.

For more information, see Suspending/Resuming Devices, page 3-25 and Suspending/Resuming a Device Component, page 3-26.

SyntheticTestFailed

Description: Individual synthetic test failed on an application.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2011.

SYSLOGNotificationsEvent

Description: Syslog trap generated with a major severity.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Media Server.

Event Code: 2090.

To receive the SyslogNotificationEvent, you must first enable it for the Cisco Unified Communications Manager system, by running the clogNotificationsEnabled command.

1. On the Operations Manager system, open a Command Prompt, and go to CSCOpx/conf/pif/bin.

2. Enter the following command:
SetCCMStorePeriods -f <clogNotificationsEnabled 1(for true) or 2(for false)> -u 5 <ccmAddress> <rwCommunity>

For example, if x.x.x.x is the Cisco Unified Communications Manager IP address and the community string is public, the command would look like the following:

SetCCMStorePeriods -f 1 -u 5 x.x.x.x public

TemperatureHigh

Description: Operating temperature exceeds the threshold.

Trigger: Exceeded Relative Temperature Threshold.

Severity: Critical.

Device Type: Media Server, Router, or Switch.

Event Code: 2029.

Also see OutofRange.

TemperatureSensorDegraded

Description: Temperature sensor reports abnormal temperature measurements and reports its condition as Degraded.

Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).

Severity: Warning.

Device Type: Media Server or Voice Gateway.

Event Code: 2030.

TemperatureSensorDown

Description: Temperature sensor reports abnormal temperature measurements and reports its condition as Failed.

Trigger: Processed trap (see Processed SNMP Traps, page C-1).

Severity: Critical.

Device Type: Media Server or Voice Gateway.

Event Code: 2031.

TotalTimeUsedThresholdExceeded

Description: Total time used in minutes for greetings and messages in all mailboxes exceeds Total Time Used Threshold.

Trigger: Exceeded Total Time Used Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2047

TranscoderRunningOutOfResources

Description: Transcoder registered with Cisco Unified Communications Manager is out of resources.

Trigger: Polling.

Severity: Critical.

Device Type: Media Server.

Event Code: 2055.

UMRCommunicationError

Description: Cisco Unity Message Repository (UMR) cannot communicate with the Partner Mail Server to deliver messages. Messages will be held in the temporary store until the mail server is available.

Trigger: WMI event.

Severity: Critical.

Device Type: Media Server.

Event Code: 2106.

UnityFailOverOrRestart

Description: One of the following:

In standalone Cisco Unity configuration—Indicates Cisco Unity system has rebooted/restarted.

In Cisco Unity failover configuration—A failover between the primary and secondary Cisco Unity servers occurred.

Note UnityFailOverOrRestart is automatically cleared after 30 minutes. Clearing of this event does not indicate that failback has occurred. When failback does occur from secondary to primary, you will see the UnityFailOverOrRestart event on the primary Cisco Unity server.

Trigger: WMI event.

Severity: Critical.

Device Type: MediaServer.

Event Code: 2105.

UnityPortHung

Description: Indicates a problem with a voice mail port that is configured to answer calls. Before taking action on the voice mail port, investigate on the server where Cisco Unity resides.

Trigger: Exceeded Hung Port Threshold.

Severity: Critical.

Device Type: Media Server.

Event Code: 2102.

Unresponsive

Description: Device does not respond to ICMP or SNMP requests. Probable causes are:

On a system: ICMP ping requests and SNMP queries to the device timeout received no response.

On an SNMP Agent: Device ICMP ping requests are successful, but SNMP requests time out with no response.

Note A system might also be reported as Unresponsive if the only link (for example, an interface) to the system goes down.

Trigger: Polling.

Severity: Critical.

Device Type: Host, Hub, Router, Switch, Optical Switch, Media Server, Phone Access Switch, Voice Mail Gateway, or Voice Gateway.

Event Code: 1022.

VoicePortLostContact
WithCluster

Description: Voice port lost registration with a Cisco Unified Communications Manager cluster.

Trigger: Polling.

Severity: Critical.

Device Type: Voice Gateway or Voice Mail Gateway.

Event Code: 2036.

VoicePortOperationallyDown

Description: Voice port's operational state is not normal.

Trigger: Polling.

Severity: Critical.

Device Type: Voice Gateway.

Event Code: 2037.

Note This event only applies to switch ports, not voice gateway ports.


Obsolete Events

Table E-1 contains a list of events removed from the Monitoring Dashboard. Also listed are equivalent events that can be used in place of the obsolete events.

Table E-2 Operations Manager Obsoleted Events and Replacement Events

Obsolete Event
Event Replacement Option

TooManyUnityPortsActive

See HighPortUtilization.1

TooManyInboundPortsActive

See HighPortUtilization.1

TooManyOutboundPortsActive

See HighPortUtilization.1

CiscoTranscoderAvailResourceLow

See HighResourceUtilization.1

1 Enable performance polling in order to view the equivalent HighPortUtilization and HighResourceUtilization event.