Table E-1 Events that Operations Manager Supports
Event
|
Description, Cause, Severity and Event Code
|
AvailableInboxLicenseLow
|
Description: Number of available inbox licenses are fewer than the threshold.
Trigger: Fell below Unity Inbox License Threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2103.
|
AvailableLicenseLow
|
Description: The number of available Unity licenses are fewer than the threshold.
Trigger: Fell below Unity License Threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2104.
|
AverageLatency_ThresholdExceeded
|
Description: The average latency for a node-to-node UDP Jitter for VoIP test exceeds the threshold set for the test.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4004.
|
Authentication Failed
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: Occurs when there is authentication failure in a login attempt.
Trigger: Polling.
Severity: Warning.
Device Type: Unified Communications Manager version 6.x or later.
Clear Interval: Time-based auto clear in Event Promulgation Module (EPM) after 30 minutes.
Event Code: 7006.
|
BackupActivated
|
Description: Backup port or interface has come online, indicating that the port or interface it backs up has gone down.
Trigger: Polling.
Severity: Warning.
Device Type: Host, Hub, Router, Optical Switch, or Switch.
Event Code: 1000.
|
CCMEDown
|
Description: The Cisco Unified Communications Manager Express application is down. This could be due to some problem in the application or device.
Trigger: Polling.
Severity: Critical.
Device Type: Router.
Event Code: 2038.
For Cisco Unified Communications Manager, see CallManagerDown.
|
CCMEEphoneDeceased
|
Description: The state of an ephone registered to Cisco Unified Communications Manager Express changed to deceased.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2076.
|
CCMEEphoneLoginFailed
|
Description: An ephone login to Cisco Unified Communications Manager Express was rejected or failed.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2078.
|
CCMEEphoneRegistrationFailed
|
Description: An ephone attempted to register with Cisco Unified Communications Manager Express and failed.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2077.
|
CCMEEphoneUnregistrationsExceeded
|
Description: The number of ephones registered to Cisco Unified Communications Manager Express was exceeded.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Router or VoiceGateway.
Event Code: 2075.
|
CCMEKeyEphoneRegistrationChange
|
Description: Registration status changed for a key IP ephone with respect to Cisco Unified Communications Manager Express.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2080.
|
CCMELivefeedMOHFailed
|
Description: Music on hold (MOH) live feed failed on Cisco Unified Communications Manager Express.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2074.
|
CCMEMaximumConferencesExceeded
|
Description: Maximum number of simultaneous three-party conferences supported was exceeded on Cisco Unified Communications Manager Express.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2073.
|
CCMENightServiceChange
|
Description: Night service status changed on an ephone registered to Cisco Unified Communications Manager Express.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Router or VoiceGateway.
Event Code: 2079.
|
CCMEStatusChange
|
Description: Cisco Unified Communications Manager Express enabled state has changed.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2072.
|
CCMHttpServiceDown
|
Description: HTTP service cannot be used to communicate to all Cisco Unified Communications Managers in the cluster. This might be due to the following:
• The web service for all Cisco Unified Communications Managers in the cluster is down.
• The credentials (username, password) for at least one of the running web services were not found or are incorrect.
Trigger: Polling.
Severity: Critical.
Device Type: Cisco Unified Communications Manager or cluster.
Event Code: 2009.
|
CDR Agent Send File Failed
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: The CDR Agent cannot send CDR files from a Communications Manager node to the CDR Repository node within the Communications Manager cluster.
Trigger: Polling.
Severity: Critical.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 60 minutes.
Event Code: 7010.
|
CDR File Delivery Failed
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: The FTP delivery of CDR files to the outside billing server failed.
Trigger: Polling.
Severity: Warning.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 60 minutes.
Event Code: 7011.
|
CDR High Water Mark Exceeded
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: The High Water Mark for CDR files has been reached and some successfully delivered CDR files have been deleted.
Trigger: Polling.
Severity: Warning.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear after 30 minutes.
Event Code: 7014.
|
CDR Maximum Disk Space Exceeded
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: The CDR files disk usage has exceeded the maximum disk allocation. Some undelivered files have been deleted.
Trigger: Polling.
Severity: Critical.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 60 minutes.
Event Code: 7008.
|
Cisco1040SensorDown
|
Description: A Cisco 1040 has stopped responding to keepalives from Service Monitor.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Unidentified Trap (because Operations Manager does not monitor Cisco 1040.)
Event Code: 8004.
This event appears on the Alert Details page and can be generated only when you have a licensed copy of Service Monitor.
|
Cisco DRF Failure
Supported for CCM 5.x and later.
|
Description: The DRF backup or restore process has encountered errors.
Trigger: Polling.
Severity: Critical.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 4 days.
Event Code: 7007.
|
Code Red
|
Description: Cisco Unified Communications Manager has entered Code Red state (call-throttling mode) due to unacceptably high delay in handling incoming calls.
Trigger: Syslog.
Severity: Critical.
Device Type: Cisco Unified Communications Manager or cluster.
Clear Interval: Time-based auto clear in Event Promulgation Module (EPM) after 4 days.
Event Code: 2048.
|
Code Yellow
|
Description: Cisco Unified Communications Manager has entered Code Yellow state (call-throttling mode) due to an unacceptably high delay in handling incoming calls.
Trigger: Syslog.
Severity: Critical.
Device Type: Cisco Unified Communications Manager or cluster.
Event Code: 2049.
|
Code Yellow
|
Description: Cisco Unified Communications Manager call-throttling terminates when the delay in handling incoming calls falls below the exit latency.
Trigger: Syslog.
Severity: Informational.
Device Type: Cisco Unified Communications Manager or cluster.
Event Code: 2049.
|
ComponentDown
|
Description: A component within IPCC is down.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2039.
|
Core Dump File Found
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: This indicates that a core dump file has been found in the system.
Trigger: RTMT.
Severity: Critical.
Device Type: Cisco Unified Communications Manager or cluster.
Clear Interval: Time-based auto clear in EPM after 4 days.
Event Code: 7009.
|
CPALoginFailureThresholdExceeded
|
Description: The number of failed Cisco Personal Assistant logins that exceeded the limit.
Trigger: Exceeded the CPA Login Failure threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2086.
|
CPATransferFailedThresholdExceeded
|
Description: Number of times that Cisco Personal Assistant tried and failed to transfer a call.
Trigger: Exceeded the CPA Transfer Failed threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2087.
|
CPAVoicemailThresholdExceeded
|
Description: The number of times callers tried to access voice mail but failed, or the number of voicemail login failures that exceeded the limit.
Trigger: Exceeded the CPA Voice Mail threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2088.
|
CPUPegging
|
Description: The percentage of CPU load on a server is over the configured percentage for the configured period of time.
Trigger: RTMT.
Severity: Critical.
Device Type: Communications Manager or cluster.
Event Code: 1013. 2126.
|
cpuUtilizationExceeded
|
Description: CPU utilization of the voice service or the system exceeded the limit.
Trigger: Exceeded the CPU Utilization threshold.
Severity: Warning.
Device Type: Media Server.
Event Code: 2085.
Note Events are removed for CCM only. You may need to manually clear these CCM events after your upgrade is complete.
|
CriticalServiceQualityIssue
|
Description: Operations Manager has received a MOS violation trap from Service Monitor and MOS has fallen below the value set on the Event Settings page. See Configuring Service Quality Event Settings, page 20-7.
Trigger: Event settings. See Configuring Service Quality Event Settings, page 20-7.
Severity: Critical.
Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.
Event Code: 8002.
Note This event is shown on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.
|
CTILinkDown
|
Description: An active link between CTI Manager and Cisco Unified Communications Manager is down.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2096.
|
CUEApplicationStatusChange
|
Description: An application on Cisco Unity Express has come online or gone offline.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router.
Event Code: 2063.
|
CUEBackupFailed
|
Description: Cisco Unity Express backup failed.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Router.
Event Code: 2068.
|
CUECCMConnectionLost
|
Description: Cisco Unity Express has lost connection with Cisco Unified Communications Manager.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Router.
Event Code: 2066.
|
CUENTPIssue
|
Description: Cisco Unity Express is affected by a problem with NTP.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router.
Event Code: 2069.
|
CUEResourceExhausted
|
Description: A Cisco Unity Express resource has been exhausted.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Router.
Event Code: 2067.
|
CUESecurityIssue
|
Description: Cisco Unity Express is affected by a problem with security.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router.
Event Code: 2064.
|
CUEStorageIssue
|
Description: Cisco Unity Express is affected by a problem with storage.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router.
Event Code: 2065.
|
DataPhysicalDiskDown
|
Description: Drive down on Cisco Unified Communications Manager.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2060.
|
DB Replication Failure
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT. For Unified Communications Manager 5.x or later the event name is IDS Replication Failure.
|
Description: A subscriber in a Cisco Unified Communications Manager cluster experienced a failure while replicating the data to the publisher database. This event needs to be manually cleared to delete it.
Trigger: RTMT.
Severity: Critical.
Device Type: Media Server.
Clear Interval: Time-based auto clear after 4 days.
Event Code: 2091.
|
D Channel Out of Service
|
Description: The connection to the voice gateway is out of service.
Trigger: Syslog.
Severity: Critical.
Device Type: Voice Gateway.
Clear Interval: Time-based auto clear after 4 days.
Event Code: 7021.
|
DPAPortCallManager LinkDown
|
Description: No connectivity between the DPA port and Cisco Unified Communications Manager.
Trigger: Polling.
Severity: Critical.
Device Type: Voice Mail Gateway.
Event Code: 2013.
|
DPAPortTelephonyLinkDown
|
Description: No connectivity between the DPA port and Octel voice mail.
Trigger: Polling.
Severity: Critical.
Device Type: Voice Mail Gateway.
Event Code: 2014.
|
Duplicate
|
Description: Same IP address is configured on multiple managed systems.
Trigger: Polling (often during rediscovery).
Severity: Critical.
Device Type: Host, Hub, Router, Optical Switch, or Switch.
Event Code: 1001.
|
ExcessiveFragmentation
|
Description: System memory is highly fragmented.
Trigger: Exceeded Memory Fragmentation Threshold.
Severity: Critical.
Device Type: Host, Router, Switch, or Optical Switch.
Event Code: 1003.
|
ExpertAdvisorSystemDown
|
Description: This alarm is generated when any of the subsystems of Expert Advisor is down.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2112.
|
FanDegraded
|
Description: Fan condition is Degraded.
Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Media Server or Voice Gateway.
Event Code: 2015.
|
FanDown
|
Description: Fan condition is Down.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Media Server or Voice Gateway.
Event Code: 2016.
|
Flapping
|
Description: Port or interface is repeatedly alternating between Up and Down states over a short period of time. Operations Manager issues this event by monitoring the number of link downs received within the link window for a particular network adapter (using the Link threshold and Link Window parameters).
Trigger: Exceeded Link Trap Threshold for Link Trap Window; or processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Host, Hub, Router, Optical Switch, or Switch.
Event Code: 1004.
|
HighAnalogPortUtilization
|
Description: Percentage utilization of an analog port has exceeded a threshold.
Trigger: Exceeded one of these thresholds:
• Cisco Unified Communications Manager Analog Port Utilization.
– FXS Port Utilization Threshold.
– FXO Port Utilization Threshold.
• MGCP Gateway Analog Port Utilization.
– FXS Port Utilization Threshold.
– FXO Port Utilization Threshold.
• H323 Gateway Analog Port Utilization.
– FXS Port Utilization Threshold.
– FXO Port Utilization Threshold.
– EM Port Utilization Threshold.
Note You must enable polling for Voice Utilization Settings to monitor this event.
Severity: Critical.
Device Type: Media Server or Voice Gateway.
Event Code: 4100.
|
HighBackplaneUtilization
|
Description: Utilization of the backplane's bandwidth exceeds the backplane utilization threshold.
Trigger: Exceeded Backplane Utilization Threshold.
Severity: Critical.
Device Type: Host, Router, Switch, or Optical Switch.
Event Code: 1005.
|
HighBroadcastRate
|
Description: Input packet broadcast percentage exceeds the Broadcast threshold. The input packet broadcast percentage calculates the percentage of total capacity that was used to receive broadcast packets.
Trigger: Exceeded Broadcast Threshold.
Severity: Critical.
Device Type: Host, Router, Switch, or Optical Switch.
Event Code: 1006.
|
HighBufferMissRate
|
Description: Rate of buffer misses exceeds the Memory Buffer Miss Threshold.
Trigger: Exceeded Memory Buffer Miss Threshold.
Severity: Critical.
Device Type: Host, Router, Switch or Optical Switch.
Event Code: 1007.
|
HighBufferUtilization
|
Description: Number of buffers used exceeds the Memory Buffer Utilization Threshold.
Trigger: Exceeded Memory Buffer Utilization Threshold.
Severity: Critical.
Device Type: Host, Router, Switch, or Optical Switch.
Event Code: 1008.
|
HighCollisionRate
|
Description: Rate of collisions exceeds the Collision Threshold.
Trigger: Exceeded Collision Threshold.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1009.
|
HighDigitalPortUtilization
|
Description: Percentage utilization of a digital port has exceeded a threshold.
Trigger: Exceeded one of these thresholds:
• Cisco Unified Communications Manager Digital Port Utilization
– BRI Channel Utilization Threshold.
– T1 PRI Channel Utilization Threshold.
– E1 PRI Channel Utilization Threshold.
– T1 CAS Channel Utilization Threshold.
• MGCP Gateway Digital Port Utilization.
– BRI Channel Utilization Threshold.
– T1 PRI Channel Utilization Threshold.
– E1 PRI Channel Utilization Threshold.
– T1 CAS Channel Utilization Threshold.
• H323 Gateway Digital Port Utilization.
– BRI Channel Utilization Threshold.
– T1 PRI Channel Utilization Threshold.
– E1 PRI Channel Utilization Threshold.
– T1 CAS Channel Utilization Threshold.
– E1 CAS Channel Utilization Threshold.
Note You must enable polling for Voice Utilization Settings to monitor this event.
Severity: Critical.
Device Type: Media Server or Voice Gateway.
Event Code: 4101.
|
HighDiscardRate
|
Description: A HighDiscardRate event occurs when:
• The input packet queued rate is greater than the minimum packet rate, and the input packet discard percentage is greater than the Discard Threshold. The input packet queued rate is the rate of packets received without error. The input packet discard percentage is calculated by dividing the rate of input packets discarded by the rate of packets received.
• The output packet queued rate is greater than the minimum packet rate, and the output packet discard percentage is greater than the Discard Threshold. The output packet queued rate is the rate of packets sent without error. The output packet discard percentage is calculated by dividing the rate of output packets discarded by the rate of packets sent.
Trigger: Exceeded Discard Threshold.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1010.
|
HighErrorRate
|
Description: A HighErrorRate event occurs for input or output packets when both of the following thresholds are exceeded:
• Error Threshold—Percentage of packets in error.
• Error Traffic Threshold—Percentage of bandwidth in use.
Trigger: Exceeded Error Threshold and equaled or exceeded Error Traffic Threshold.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1011.
|
HighPortUtilization
|
Description: Percentage of port utilization exceeds a threshold.
Note You must enable polling for Voice Utilization Settings to monitor this event.
Trigger: Exceeded one of these thresholds:
• Voice Mail Gateway Port Utilization.
– Voice Mail Port Utilization Threshold.
– PBX Port Utilization Threshold.
Severity: Critical.
Device Type: Media Server or Voice Mail Gateway.
Event Code: 4102.
|
HighResourceUtilization
|
Description: A hardware resource threshold has been exceeded.
Trigger: Exceeded one of these thresholds:
• Cisco Unified Communications Manager Resource Utilization
– MOH Multicast Resources Active Threshold.
– MOH Unicast Resources Active Threshold.
– MTP Resources Active Threshold.
– Transcoder Resources Active Threshold.
– Hardware Conference Resources Active Threshold.
– Software Conference Resources Active Threshold.
– Conferences Active Threshold.
– Conference Streams Active Threshold.
– MOH Streams Active Threshold.
– MTP Streams Active Threshold.
– Location Bandwidth Available Threshold.
• H323 Gateway Resource Utilization.
– DSP Utilization Threshold.
• Gatekeeper Resource Utilization.
– Total Bandwidth Utilization for Local Zone Threshold.
– Interzone Bandwidth Utilization for Local Zone Threshold.
• Cisco Unified Communications Manager Express Utilization.
– Registered IP Phones Threshold.
– Registered Key IP Phones Threshold.
• Cisco Unity Express Utilization.
– Capacity Utilization Threshold.
– Session Utilization Threshold.
– Orphaned Mailboxes Threshold.
Note You must enable polling for Voice Utilization Settings to monitor this event.
Severity: Critical.
Device Type: Cisco Unified Communications Manager or cluster, Gatekeeper, Media Server, Router, or Voice Gateway.
Event Code: 4103.
|
HighUtilization
|
Description: Current utilization exceeds the utilization threshold configured for this network adapter or processor.
Trigger: Exceeded one of these thresholds:
• Utilization Threshold.
• Processor Utilization Threshold.
Severity: Critical.
Device Type: Host, Media Server, Router, Switch, Optical Switch, or Voice gateway.
Event Code: 1013.
|
ICT Call Throttling
|
Description: Cisco Unified Communications Manager has resumed normal state and starts accepting calls for the indicated H323 device.
Trigger: Syslog.
Severity: Informational.
Device Type: Communications Manager or cluster.
|
ICT Call Throttling
|
Description: Cisco Unified Communications Manager has detected a route loop over H323 trunk. As a result, it has temporarily stopped accepting calls for the indicated H323 device.
Trigger: Syslog.
Severity: Informational.
Device Type: Communications Manager or cluster.
|
IDS Replication Failure
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: A subscriber in a Cisco Unified Communications Manager cluster experienced a failure while replicating the data to the publisher database. This event needs to be manually cleared to delete it.
Trigger: RTMT.
Severity: Critical.
Device Type: Media Server.
Clear Interval: Time-based auto clear after 4 days.
Event Code: 2091.
|
IdeAtaDiskDown
|
Description: IDE/ATA drive down on Cisco Unified Communications Manager.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2062.
|
InformAlarm
|
Description: An informational pass-through trap was generated.
Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.
Severity: Informational.
Event Code: 1014.
|
InsufficientFreeHardDisk
|
Description: Free disk space is low.
Trigger: Exceeded Free Hard Disk Threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2020.
See also InsufficientFreeMemory, InsufficientFreePhysicalMemory, InsufficientFreeVirtualMemory.
Note Events are removed for Unified Communications Manager only. You may need to manually clear these CCM events after your upgrade is complete.
|
InsufficientFreeMemory
|
Description: System is running out of memory resources. Also reported if there has been a failure to allocate a buffer due to lack of memory.
Trigger: Exceeded Free Memory Threshold.
Severity: Critical.
Device Type: Host, Media Server, Router, Switch, or Optical Switch.
Event Code: 1015.
See also InsufficientFreeHardDisk, InsufficientFreePhysicalMemory, InsufficientFreeVirtualMemory.
Note Events are removed for CCM only. You may need to manually clear these CCM events after your upgrade is complete.
|
InsufficientFreePhysicalMemory
|
Description: System is running out of physical memory resources.
Trigger: Exceeded Free Physical Memory Threshold.
Severity: Critical.
Device Type: Voice Gateway.
Event Code: 2021.
See also InsufficientFreeHardDisk, InsufficientFreeMemory, InsufficientFreeVirtualMemory.
Note Events are removed for CCM only. You may need to manually clear these CCM events after your upgrade is complete.
|
InsufficientFreeVirtualMemory
|
Description: System is running out of virtual memory resources.
Trigger: Exceeded Free Virtual Memory Threshold.
Severity: Critical.
Event Code: 2022.
Device Type: Media Server.
See also InsufficientFreeHardDisk, InsufficientFreeMemory, InsufficientFreePhysicalMemory.
Note Events are removed for CCM only. You may need to manually clear these CCM events after your upgrade is complete.
|
InterfaceOperationallyDown
|
Description: Interface is nonoperational.
Trigger: Polling.
Severity: Critical.
Device Type: Digital Voice Gateway, Media Server, or Voice Gateway.
Event Code: 2023.
See also OperationallyDown.
|
IPCCDualStateNotification
|
Description: The Unified Contact Center sent a notification with a value of cccaEventState in the trap details.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Media Server.
Event Code: 2070.
|
IPCCSingleStateNotification
|
Description: The Unified Contact Center sent a notification with a value of singleStateRaise for ccaEventState in the trap details.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Media Server.
Event Code: 2070.
|
JitterDS_ThresholdExceeded
|
Description: Jitter exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4008.
For more information, see Using Node-To-Node Tests, page 11-1.
|
JitterSD_ThresholdExceeded
|
Description: Jitter exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4007.
For more information, see Using Node-To-Node Tests, page 11-1.
|
LocationBWOutOfResources
|
Description: A call through a Cisco Unified Communications Manager location failed due to lack of bandwidth.
Trigger: Exceeded Location Out of Resources Threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2094.
|
LogPartitionHighWatermarkExceeded
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: The percentage of used disk space in the log partition has exceeded the configured high-water mark.
Trigger: Exceeded high-water mark threshold.
Severity: Informational.
Device Type: Communications Manager.
Event Code: 2132.
|
LogPartitionLowWatermarkExceeded
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: Free disk space is low. The percentage of used disk space in the log partition has exceeded the configured low water mark. There are no files to be purged under such a situation.
Trigger: Exceeded free hard disk threshold.
Severity: Informational.
Device Type: Media Server.
Event Code: 2131.
See also LogPartitionHighWatermarkExceeded, LogPartitionLowWatermarkExceeded, and LowInactivePartitionAvailableDiskSpace.
|
LostContactWithCluster
|
Description: Voice gateway, voice gatekeeper, voice port, or voice interface lost registration with a Cisco Unified Communications Manager cluster.
Trigger: Polling.
Severity: Critical.
Device Type: Voice Gateway (voice port, voice interface), Voice Mail Gateway (voice port), Digital Voice Gateway, Gatekeeper.
Event Code: 2035.
|
LowActivePartitionAvailableDiskSpace
Supports Unified Communications Manager version 5.x or later.
|
Description: The percentage of available disk space on the active partition is lower than the configured value.
Trigger: Threshold.
Severity: Critical.
Device Type: Communications Manager.
|
LowAvailableDiskSpace
Supports Unified Communications Manager version 4.x or later.
|
Description: The percentage of available disk space on the active partition is lower than the configured value.
Trigger: Threshold.
Severity: Critical.
Device Type: Communications Manager.
|
LowAvailableVirtualMemory
|
Description: The percentage of available virtual memory is lower than the configured value.
Trigger: Threshold.
Severity: Critical.
Device Type: Communications Manager.
Event Code: 2022.
|
LowInactivePartitionAvailableDiskSpace
Supports Unified Communications Manager version 5.x or later.
|
Description: The percentage of available disk space of the inactive partition is lower than the configured value.
Trigger: Threshold.
Severity: Critical.
Device Type: Communications Manager.
Event Code: 2020.
|
LowSwapPartitionAvailableDiskSpace
Supports Unified Communications Manager version 5.x or later.
|
Description: The percentage of available disk space of the swap partition is lower than the configured value.
Trigger: Threshold.
Severity: Critical.
Device Type: Communications Manager.
Event Code: 2121.
|
MajorAlarm
|
Description: Critical pass-through trap was generated.
Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.
Severity: Informational.
Event Code: 1016.
|
Media Resource List Exhausted
Supports Unified Communications Manager version 6.x or later in Syslog/RTMT.
|
Description: All available media resources defined in media list are busy.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code: 2056, 4103, 2052, 2053, 2057 and pass-through trap.
|
MeetingPlaceSwAlarm
|
Description: This alarm is generated when the Meeting Place device reports any software alarm.
Trigger: Trap-Based Event.
Severity: Warning.
Device Type: Media Server.
Event Code: 2113.
|
MinorAlarm
|
Description: Significant pass-through trap was generated.
Trigger: Pass-through trap. See Pass-Through and Unidentified Traps, page C-4.
Severity: Informational.
Event Code: 1017.
|
MultipleServiceQualityIssue
|
Description: Operations Manager has generated a user-defined number of Service Quality Issue events in a user-defined number of minutes.
Trigger: Event settings. See Configuring Service Quality Event Settings, page 20-7.
Severity: Critical.
Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.
Event Code: 8003.
Note When this event occurs, Multiple Service Quality Issues is displayed in the status bar on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.
|
MWIOnTimeExceeded
|
Description: MWIOnTime value exceeded the threshold.
Trigger: Exceeded MWI on time threshold.
Severity: Warning.
Device Type: Media Server.
Event Code: 2024.
|
NicDown
|
Description: Network interface card down on an IPCC.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2040.
|
NodeToNodeTestFailed
|
Description: A node-to-node test failed.
Trigger: Node-to-node tests
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4000.
|
Number Of Registered Phones Dropped
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: The number of registered phones in the cluster dropped more than the configured percentage between consecutive polls.
Trigger: Threshold.
Severity: Warning.
Device Type: Phone.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code: 7016.
|
Number Of Registered Gateways Decreased1
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: The number of registered gateways decreases between consecutive RTMT polls.
Trigger: Polling.
Severity: Warning.
Device Type: Voice Gateway.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code:
|
Number Of Registered Gateways Increased1
Supports Unified Communications Manager version 5.x or later in Syslog/RTMT.
|
Description: The number of registered gateways increases between consecutive RTMT polls.
Trigger: Polling.
Severity: Informational.
Device Type: Voice Gateway.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code:
|
Number Of Registered MediaDevices Decreased1
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: A registered media device count decreases between consecutive RTMT polls.
Trigger: Polling.
Severity: Informational.
Device Type: Cluster.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code: 7018.
|
Number Of Registered MediaDevices Increased1
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: A registered media device count increases between consecutive RTMT polls.
Trigger: Polling.
Severity: Informational.
Device Type: Cluster.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code: 7017.
|
OperationallyDown
|
Description:
Interface—Card or network adapter's operational state is not normal.
System Hardware—Disk's operational state is not normal.
Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).
Note For interfaces, Operations Manager will only generate an OperationallyDown clear event if the card is reinserted into the same slot, and if the module index is the same before and after the card is reinserted.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1018.
See also CardDown, InterfaceOperationallyDown, and VoiceCardDown.
|
OutofRange
|
Description: Device temperature or voltage is outside the normal operating range. When an OutofRange event is generated, you will normally also see fan, power supply, or temperature events.
Trigger: Exceeded one of these thresholds:
• Relative temperature threshold.
• Relative voltage threshold.
Severity: Critical.
Device Type: Host, Router, Switch, or Optical Switch.
Event Code: 1019.
|
PacketLossDS_ThresholdExceeded
|
Description: Packet loss exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4006.
For more information, see Using Node-To-Node Tests, page 11-1.
|
PacketLossSD_ThresholdExceeded
|
Description: Packet loss exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4005.
For more information, see Using Node-To-Node Tests, page 11-1.
|
PhoneReachabilityTestFailed
|
Description: Operations Manager cannot reach an IP phone. The IP phone has not responded to three or more successive pings from Operations Manager or the IP SLA device.
Trigger: Polling.
Severity: Critical.
Device Type: IP Phone.
Event Code: 9002.
|
PhonesUnregistered
|
Description: The selected phone-based notification group's phones unregistered count is less than the Unified Communications Manager/Unified Communications Manager Express-based event threshold for the same Unified CM Express.
Trigger: Polling (Notification).
Severity: Warning.
Device Type: IP Phone.
Event Code: N/A
|
PhonesUnregisteredThresholdBased
|
Description: The selected phone-based notification group's phones unregistered count is more than the Unified Communications Manager/Unified Communications Manager Express-based event threshold for the same Unified CM Express.
Trigger: Polling (Notification).
Severity: Warning.
Device Type: Unified Communications Manager/Unified Communications Manager Express.
Event Code: N/A
|
PimDown
|
Description: IPCC Peripheral Interface Manager (PIM) down.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2041.
|
PowerSupplyDegraded
|
Description: Power supply state is Degraded.
Trigger: Polling.
Severity: Warning.
Device Type: Media Server or Voice Gateway.
Event Code: 2026.
|
PowerSupplyDown
|
Description: Power supply state is Down.
Trigger: Trap and polling.
Severity: Critical.
Device Type: Media Server or Voice Gateway.
Event Code: 2027.
|
QualityDroppedBelowThreshold
|
Description: Quality has fallen below the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4009.
For more information, see Using Node-To-Node Tests, page 11-1.
|
RegistrationResponseTime_Threshold Exceeded
|
Description: Registration response time exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4003.
For more information, see Using Node-To-Node Tests, page 11-1.
|
RepeatedRestarts
|
Description: System repeatedly restarts over a short period of time. Operations Manager issues this event by monitoring the number of system cold and warm starts received within the restart window (using the Restart threshold and the RestartWindow parameters).
Trigger: Exceeded Restart Trap Threshold for Restart Trap Window; or processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1020.
|
Resumed
|
Description: Operations Manager resumes monitoring for a device or component that had previously been suspended from monitoring.
Trigger: User clicks Resume on the Detailed Device View for a device or component that was previously suspended from monitoring. Additionally, a user applies changes.
Severity: Critical.
Device Type: Any.
Event Code: 1024.
For more information, see Suspending/Resuming Devices, page 3-25, Suspending/Resuming a Device Component, page 3-26, and Applying Changes, page 19-61.
|
RingBackResponseTime_Threshold Exceeded
|
Description: Ring-back response time exceeds the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4002.
For more information, see Using Node-To-Node Tests, page 11-1.
|
RoundTripResponseTime_Threshold Exceeded
|
Description: Round trip response time fallen below the node-to-node test threshold.
Trigger: Node-to-node test.
Severity: Warning.
Device Type: Router or Switch.
Event Code: 4001.
For more information, see Using Node-To-Node Tests, page 11-1.
|
Route List Exhausted
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: This indicates that all available channels defined in route list are busy.
Trigger: Polling.
Severity: Critical.
Device Type: Voice Gateway.
Clear Interval: Time-based auto clear after 60 minutes.
Event Code: 4104, 4106, and 4107.
|
RTMT Data Missing
|
Description: This indicates that RTMT poll-based data is missing.
Trigger: Polling.
Severity: Critical.
Device Type: Unified Communications Manager.
Event Code:
|
SCSIControllerDown
|
Description: SCSI controller is down on a Compaq system.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2101.
|
SCSIDriveDown
|
Description: SCSI drive down on Cisco Unified Communications Manager.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2061.
|
SDL Link Out Of Service
|
Description: This event indicates that the local Cisco Unified Communications Manager has lost communication with the remote Communications Manager.
Trigger: Syslog.
Severity: Warning.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 4 days.
Event Code: 7002.
|
ServiceDown
Supports Unified Communications Manager (UCM) version 4.x and below. If a service is stopped/deactivated by the UCM admin user, the ServiceDown event is not generated in Operations Manager for UCM's 5.x and above.
|
Description: Service can run but is not running due to some problem in the service or device.
Trigger: Polling.
Severity: Critical (dependent on service).
Device Type: Media Server.
Event Code: 2007.
Note Events are removed for CCM only. You may need to manually clear these CCM events after your upgrade is complete.
|
ServiceQualityIssue
|
Description: Operations Manager has received a MOS violation trap from Service Monitor. This indicates that MOS has dropped below a threshold that is set in Service Monitor.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Service Quality events pertain to the call destination, which might be a device (Voice Gateway) or a phone.
Event Code: 8001.
Note This event is shown on the Service Quality Alert Details display. (See Using the Service Quality Alerts Display, page 4-3.) This event can be generated only when you have a licensed copy of Service Monitor.
|
SOAPNotReachable
|
Description: Device experienced Simple Object Access Protocol (SOAP) connectivity failure while polling. SOAP attributes will not be polled.
Trigger: Cisco Unified Communications Manager device experienced SOAP communication failure with the management application. Unified Communications Manager may be overloaded or the web service may be down. Rediscover the device in Cisco Unified Operations Manager.
Severity: Critical.
Device Type: Media Server.
Event Code: 2109.
|
SRSTEntered
|
Description: An IP telephony router is functioning in Survivable Remote Site Telephony (SRST) mode, performing call management for phones in place of the central Cisco Unified Communications Manager. The event is generated when a WAN link is down, preventing IP phone TCP keepalive messages from reaching the Cisco Unified Communications Manager.
Trigger: Polling (See also Table 18-1 on page 18-3).
Severity: Critical.
Device Type: Router, Switch, or Optical Switch.
Event Code: 9000.
Note This event triggers activity on the Phone Activities monitoring dashboard.
|
SRSTRouterFailure
|
Description: A catastrophic failure occurred on an SRST router.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Router or VoiceGateway.
Event Code: 2071.
|
SRSTSuspected
|
Description: IP Phone Information Facility reports that all phones associated with the SRST router are unregistered, but the WAN link between phones and the central Cisco Unified Communications Manager is up.
Trigger: Polling.
Severity: Critical.
Device Type: Router, Switch, or Optical Switch.
Event Code: 9001.
Note This event triggers activity on the Phone Activities monitoring dashboard.
|
StateNotNormal
|
Description: A fan, power supply, temperature sensor, or voltage sensor is not acting normally. When an OutofRange event is generated, you will also see a fan, power supply, or temperature event.
Trigger: Polling.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, or Optical Switch.
Event Code: 1021.
|
Suspended
|
Description: Operations Manager suspends monitoring of a device or component.
Trigger: User clicks Suspend on the Detailed Device View for a device or component.
Severity: Critical.
Device Type: Any.
Event Code: 1023.
For more information, see Suspending/Resuming Devices, page 3-25 and Suspending/Resuming a Device Component, page 3-26.
|
SyntheticTestFailed
|
Description: Individual synthetic test failed on an application.
Trigger: Polling.
Severity: Critical.
Device Type: Media Server.
Event Code: 2011.
|
SyntheticTestThresholdExceeded
|
Description: Individual synthetic test execution threshold value is exceeded.
Trigger: Polling.
Severity: Warning.
Device Type: Media Server.
Event Code: 9003.
|
SystemVersionMismatched
Supports Unified Communications Manager version 6.0.x in Syslog/RTMT.
|
Description: This alert occurs when there is mismatch in system version.
Trigger: Polling.
Severity: Informational.
Device Type: Unified Communications Manager.
|
TemperatureHigh
|
Description: Operating temperature exceeds the threshold.
Trigger: Exceeded Relative Temperature Threshold.
Severity: Critical.
Device Type: Media Server, Router, or Switch.
Event Code: 2029.
See also OutofRange.
|
TemperatureSensorDegraded
|
Description: Temperature sensor reports abnormal temperature measurements and reports its condition as Degraded.
Trigger: Polling, or processed trap (see Processed SNMP Traps, page C-1).
Severity: Warning.
Device Type: Media Server or Voice Gateway.
Event Code: 2030.
|
TemperatureSensorDown
|
Description: Temperature sensor reports abnormal temperature measurements and reports its condition as Failed.
Trigger: Processed trap (see Processed SNMP Traps, page C-1).
Severity: Critical.
Device Type: Media Server or Voice Gateway.
Event Code: 2031.
|
Thread Counter Update Stopped
Supports Unified Communications Manager version 5.1.3 or later in Syslog/RTMT.
|
Description: Total number of processes and/or threads exceeded the defined threshold. Usually this indicates system resource leaking.
Trigger: Exceeded defined threshold.
Severity: Informational.
Device Type: Communications Manager.
Clear Interval: Time-based auto clear in EPM after 4 days.
Event Code: 7023.
|
TotalTimeUsedThresholdExceeded
|
Description: Total time used in minutes for greetings and messages in all mailboxes exceeds Total Time Used Threshold.
Trigger: Exceeded Total Time Used Threshold.
Severity: Critical.
Device Type: Media Server.
Event Code: 2047.
|
UMRCommunicationError
|
Description: Cisco Unity Message Repository (UMR) cannot communicate with the Partner Mail Server to deliver messages. Messages will be held in the temporary store until the mail server is0 available.
Trigger: WMI event.
Severity: Critical.
Device Type: Media Server.
Event Code: 2106.
|
Unknown Publisher
|
Description: The publisher in the cluster is unknown. This is a poll-based event.
Trigger: RTMT.
Severity: Critical.
Device Type: Unified Communications Manager.
|
UnityFailOverOrRestart
|
Description: One of the following:
• In standalone Cisco Unity configuration—Indicates Cisco Unity system has rebooted/restarted.
• In Cisco Unity failover configuration—A failover between the primary and secondary Cisco Unity servers occurred.
Note UnityFailOverOrRestart is automatically cleared after 30 minutes. Clearing of this event does not indicate that failback has occurred. When failback does occur from secondary to primary, you will see the UnityFailOverOrRestart event on the primary Cisco Unity server.
Trigger: WMI event.
Severity: Critical.
Device Type: MediaServer.
Event Code: 2105.
|
|
|
Description: Device does not respond to ICMP or SNMP requests. Probable causes are:
• On a system: ICMP ping requests and SNMP queries to the device timeout received no response.
• On an SNMP Agent: Device ICMP ping requests are successful, but SNMP requests time out with no response.
Note A system might also be reported as unresponsive if the only link (for example, an interface) to the system goes down. Operations Manager performs root cause analysis for any unresponsive events. If Operations Manager receives a device unresponsive, it will clear any interface unresponsive events from that device until the device is recognized as up/responsive.
Trigger: Polling.
Severity: Critical.
Device Type: Host, Hub, Router, Switch, Optical Switch, Media Server, Phone Access Switch, Voice Mail Gateway, or Voice Gateway.
Event Code: 1022.
|
VoicePortOperationallyDown
|
Description: Voice port's operational state is not normal.
Trigger: Polling.
Severity: Critical.
Device Type: Voice Gateway.
Event Code: 2037.
Note This event only applies to switch ports, not voice gateway ports.
|