-
User Guide for Device Fault Manager 3.0.2 (With LMS 3.0 December 2007 Update)
-
Open Source License Acknowledgements
-
Preface
-
Introduction
-
Getting Started with DFM
-
Using the Alerts and Activities Display
-
Using Device Management
-
Using Notification Services
-
Using Fault History
-
Configuring and Administering DFM (Basic)
-
Managing Groups
-
Configuring Views for the Alerts and Activities Display
-
Configuring Polling and Thresholds
-
Administering DFM (Advanced)
-
MIBs Polled
-
Processed and Pass-Through Traps, and Unidentified Traps and Events
-
Notification MIB
-
Events Processed
-
PollingSNMP and ICMP
-
How DFM Calculates Repeated Restarts and Flapping
-
Index
-
Table Of Contents
Using the Alerts and Activities Display
How to Use the Alerts and Activities Display
Starting the Alerts and Activities Display
Understanding the Layout of the Alerts and Activities Display
Customizing the Alerts and Activities Display
Selecting Views for Alerts and Activities
Filtering Alerts and Activities
Starting the Alerts and Activities Detail Page
Understanding the Layout of the Alerts and Activities Detail Page
Viewing Events Associated with an Alert
Getting Device Information (Detailed Device View)
Starting the Detailed Device View
Understanding the Detailed Device View
Suspending Device and Element Monitoring
Suspending and Resuming Devices
Suspending/Resuming a Single Device Component
Performing Bulk Manage and Unmanage Operations
Acknowledging, Annotating, and Sending E-Mail Notifications of Alerts
Sending E-Mail in Response to an Alert
Using the Alerts and Activities Display
These topics describe how to use the Alerts and Activities display:
•
How to Use the Alerts and Activities Display
•
•
•
•
•
How to Use the Alerts and Activities Display
The Alerts and Activities display provides real-time information about the operational status of your network. The displays are designed so that you can set them up and leave them running, providing an ongoing monitoring tool that signals you when something needs attention.
When a fault occurs in your network, Device Fault Manager (DFM) generates an event. All events occurring on the same device are rolled up into a single alert. If the alert occurs on an element in your active Alerts and Activities view, it is shown on your Alerts and Activities display.
When you click the Alert ID, the Alerts and Activities Detail display opens and lists all events in that particular alert. Alerts are displayed by severity; the most severe and recent alerts are listed first. The alert severity is the severity of the alert's most critical event.
You can change event names to names that are more meaningful to you. These customized names will be reflected in both the Alerts and Activities display and any Fault History reports you generate. For information on changing DFM event names using Notification Customization, see Customizing the Names of DFM Events.
You can monitor all devices that DFM supports, once you have added those devices using Device Management and ensured that the devices are in your view. However, DFM reports alerts on specific devices or components, not on entire device groups.
You can start the Alerts and Activities display from DFM. If the DFM server is using Access Control Server (ACS) mode, ACS may limit the devices you are permitted to view. For more information, refer to Device-Based Filtering.
All Fault History reports generated from within the Alerts and Activities display provide information from the past 24 hours.
To generate a Fault History report on time spans beyond the last 24 hours, use Fault History from DFM by selecting Fault History. For more information, see Starting Fault History from the DFM Home Page.
Starting the Alerts and Activities Display
You can start the Alerts and Activities display several ways:
•
•
•
Traps received from the Devices are also shown in Alerts and Activities display. For more information on Traps, see Processed and Pass-Through Traps, and Unidentified Traps and Events
Figure 3-1 shows an example of an Alerts and Activities display.
Tip
Figure 3-1 Alerts and Activities Display
View pane. See View Pane.
Tabular display pane. See Tabular Display Pane.
Launch information and view status bar area. See Launch Information and View Status Bar Area.
Window tools area. See Window Tools Area.
Understanding the Layout of the Alerts and Activities Display
These topics provide details about the information in the Alerts and Activities display.
View Pane
The view pane lists the currently available views, or logical groupings of device groups. Views must be created and activated before they will be shown in the Alerts and Activities display. By default, two views—All Alerts and Suspended Devices—are always shown.
You can delete alerts from your Alerts and Activities display. (To create and activate a view or remove an unwanted view from your display, see Configuring Views for the Alerts and Activities Display.)
The current view is highlighted in the view pane. The contents of the current view are shown in the tabular display pane to the right of the view pane. To select another view, simply click the view name in the view pane.
Figure 3-2 shows four active views; the current view is View1. Icons next to the views indicate the severity of the alerts received from devices in those views, signaling you that the devices may need attention.
Figure 3-2 Alerts and Activities Display—View Pane and Severity Icons
For the current view (View1 in this example), severity icons also appear next to the alerts in the tabular display, as shown in Figure 3-2, to help you quickly locate a specific alert.
The view pane is updated every two minutes. You can have up to 18 views in the view pane in a single Alerts and Activities display.
Launch Information and View Status Bar Area
The launch information area shows the time on the server when the Alerts and Activities display was started.
The view status bar lists the selected view, which is shown in the tabular display pane.
Tabular Display Pane
The tabular display pane is the core of the Alerts and Activities display. It is a paging table that contains a list of all alerts that are occurring on the devices in your current view. Alerts are polled every 30 seconds, and the data is refreshed if a change has occurred.
The information is always updated every 6 minutes, regardless of whether changes are detected. For an explanation of all of the items in the tabular display, see Alerts and Activities Tabular Display—Contents.
Icons alert you to what needs attention; for example:
•
•
You can page through the tabular display to view all records. See Figure 3-3 for an illustration of the tabular display pane.
Window Tools Area
The top-right corner of the Alerts and Activities display contains buttons for the available window tools. All buttons are described in Table 3-1.
Table 3-1 Alerts and Activities Display—Window Tools
Exports the current tabular display to a PDF file.
Opens the Filter page, for refining the tabular display in the Alerts and Activities display.
Opens a printer-friendly version for printing.
Opens a DFM Tools window with link to Fault History
Generating a 24-Hour Report on All Alerts in the Current View
Opens the DFM help window.
Getting Alert Details
Use the tabular display in the Alerts and Activities display to obtain more information about the alerts that are occurring in your current view.
In the tabular display, as shown in Figure 3-3, alerts are grouped by their severity: critical, warning, or informational. Within these severity groupings, or buckets, alerts with the latest change are listed first.
When an alert is generated, it remains in the Alerts and Activities display until it expires. DFM sets an alert state to Expired when DFM determines that the alert has been in the Cleared state for 20 minutes.
Alerts are moved to Cleared when their last active event has been in the Cleared state for 20 minutes. You can also clear an event manually (see Clearing Alerts).
While the alert is in the display, if any of its events recur, the alert is updated. If an expired alert recurs, a new alert with a new ID is shown.
The Alerts and Activities display does not report alerts generated on VLANs. However, the event properties page will show the VLAN number to which the port belongs (see Viewing Event Properties).
The Detailed Device View will display to which VLAN ports belong (see Starting the Detailed Device View).
Figure 3-3 provides an example of an Alerts and Activities tabular display. Alerts are polled every 30 seconds, and the data is refreshed if a change has occurred. The information is always updated every 6 minutes, regardless of whether changes are detected.
Figure 3-3 Alerts and Activities—Tabular Display
Table 3-2 defines the table elements.
Tip
Table 3-2 Alerts and Activities Tabular Display—Contents
Severity of alert. The alert severity is determined by the severity of the most critical event in the alert.
Critical alerts always remain at the top of the column, even if you click the column to do a reverse sort.
Critical
Warning
Informational Unidentified Trap alert
(no icon)
Informational (for all other alerts)
Alert identifier number. Clicking this link opens an Alerts and Activities Detail page (see Starting the Alerts and Activities Detail Page).
Device type. Indicates that DFM was discovering the device when the alert occurred. The actual device type is reflected when new events occur. For more information, see Using Device Management.
If the DFM server is using Access Control Server (ACS) mode, ACS may limit the devices you are permitted to view. For more information, see Device-Based Filtering.
Time span since alert creation, depending upon alert status:
Active or Acknowledged
Time span between alert creation and current server time.
Cleared
Time span between alert creation and Last Change time (the Last Change time may also represent when the alert was cleared).
Date and time alert last occurred or was changed. Diamonds indicate alert activity, such as a new event, alert acknowledgement, new user annotation, and so forth.
If there are no diamonds, it indicates that the alert is stale. Alerts are grouped by severity, and within severities, alerts with the latest change are listed first.
Alert was updated within last 15 minutes.
Alert was updated within last 16-30 minutes.
Alert was updated within last 31-45 minutes.
No diamonds
Alert was updated over 46 minutes ago.
Device name or IP address. Clicking this link opens the Detailed Device View (see Understanding the Detailed Device View).
Category of the event with the most recent change, one of the following: Environment, Interface, Other, Reachability, System Hardware, Utilization.
Alert status, based on last polling.
Active
Alert is live. (Note that alerts on suspended devices remain active; see Sending E-Mail in Response to an Alert.)
Cleared
Alert is no longer live (its last active event has been in the Cleared state for 20 minutes).
When the alert has been in the Cleared state for 20 minutes, it expires and is removed from the display.
Acknowledged
Alert was manually acknowledged by a user (from Alerts and Activities Detail page).
Clearing Alerts
You can manually clear alerts. Select one or more alerts and click Clear to remove the alerts from DFM.
Note
The alert status is changed to Cleared and remains in that state for eight minutes. After that time it is removed from the Alerts and Activities Display.
If the status of the alert changes during the eight minutes, the alert goes to the active state.
Customizing the Alerts and Activities Display
After adding your devices to a view, you can customize your Alerts and Activities display by selecting specific views and using filters:
•
•
You can also change the names of DFM events to names that are more meaningful to you. These names will be reflected in both the Alerts and Activities display and in any Fault History reports you generate. For information on changing DFM event names using Notification Customization, see Customizing the Names of DFM Events.
If the DFM server is using Access Control Server (ACS) mode, ACS may limit the devices you are permitted to view. For more information, see Device-Based Filtering.
Selecting Views for Alerts and Activities
When you open the Alerts and Activities display, all available views are listed in the view pane on the left side of the display. If the views shown do not meet your needs, you can create a new view as described in Creating a View.
The view pane is updated every two minutes. You can have up to 18 views in the view pane in a single Alerts and Activities display. See Activating and Deactivating a View for information on how to manage your views.
Filtering Alerts and Activities
You can filter the alerts on the Alerts and Activities so that only the alerts that match your filters are displayed. You can create a filter based on alert severity, status, and ID, and based on the originating device type or name.
If you use an alert filter, the filter is applied to all of your views until you change the filter; other clients are not affected. When you end your session, your filters are lost. Filters do not affect severity icons in the view pane.
To start the Alerts and Activities display,
Step 1
The Alerts and Activities display opens.
Step 2
The Alert Filters page opens. You can populate the Device Type box by selecting device types from the button to the right of the Device Type box. By default, all device types are selected.
Step 3
•
•
Step 4
Getting Event Details
These topics address how to start and use the Alerts and Activities Detail page to get more information on events:
•
•
•
You can change the names of DFM events using Notification Services. Refer to Customizing the Names of DFM Events.
Starting the Alerts and Activities Detail Page
The Alerts and Activities Detail page provides information about all of the events that were rolled up into a specific alert. Figure 3-4 provides an example of an Alerts and Activities Detail page.
The Alerts and Activities Detail page does not report alerts generated on VLANs. However, the event properties page will show the VLAN number to which the port belongs (see Viewing Event Properties).
The Detailed Device View will display to which VLAN ports belong (see Starting the Detailed Device View).
You can start the Alerts and Activities Detail page two ways:
•
•
Figure 3-4 Alerts and Activities Detail Page
Alerts status bar. See the Alert Status Bar.
Tools drop-down list. See Tools Drop-Down List.
Launch information area. See Launch Information Area.
Command button area. See Command Button Area.
Tabular display pane. See Tabular Display Pane.
Notes pane. See Notes Pane.
Window tools area. See Window Tools Area.
Understanding the Layout of the Alerts and Activities Detail Page
These topics provide details about the information in the Alerts and Activities display.
Alert Status Bar
The alert status bar lists details about the alert with which the listed events are associated. Table 3-3 explains the contents of the alert status bar area.
Table 3-3 Alerts and Activities Detail Page—Alert Status Bar Contents
Device name or IP address.
Device type. Learning indicates that DFM was discovering the device when the alert occurred. The actual device type is reflected when new events occur. For more information, see Using Device Management
If the DFM server is using Access Control Server (ACS) mode, ACS may limit the devices you are permitted to view. For more information, see Device-Based Filtering.
Alert status, based on last polling.
Active
Alert is live. (Note that alerts on suspended devices remain active; see Sending E-Mail in Response to an Alert.)
Cleared
Alert is no longer live (its last active event has been in the Cleared state for 20 minutes). When the alert has been in the Cleared state for 20 minutes, it expires and is removed from the display.
Acknowledged
Alert was manually acknowledged by a user (from Alerts and Activities Detail page). If an event on the alert recurs, the alert state reverts to Active.
Alert identifier number.
Time span since alert creation, depending upon alert status:
Active or Acknowledged
Time span between alert creation and current server time.
Cleared
Time span between alert creation and Last Change time (the Last Change time may also represent when the alert was cleared).
Time and date of last alert update (indicates activity, such as an event recurrence, alert acknowledgement, the addition of an annotation, and so forth). Alerts are grouped by severity, and within severities, alerts with the latest change are listed first.
Tabular Display Pane
In the Alerts and Activities Detail page, the tabular display pane contains a table that lists details about events. These events are associated with the alert listed in the alert status bar. You can refresh the display by clicking Refresh at the bottom of the pane. For an explanation of all of the items in the table, see Alerts and Activities Detail Tabular Display—Contents.
You can page through the tabular display to view all records. See Figure 3-3 for an illustration of the tabular display pane.
. See Figure 3-4 for an illustration of the actions you can perform from this window.
Launch Information Area
The launch information area shows the time on the server when the Alerts and Activities Detail page was started.
Window Tools Area
The top-right corner of the Alerts and Activities Detail page contains a printer tool button, as described in Table 3-4.
Table 3-4 Alerts and Activities Detail Page—Window Tool
Opens a printer-friendly version for printing
Tools Drop-Down List
The Tools drop-down list contains a list of applications that can provide more information, depending on your installation. For more information, see Alerts and Activities Detail Tabular Display—Contents.
Notes Pane
The notes pane lists any alert annotations that users have entered. The notes pane is a convenient tool for making sure that all users see alert information. You can add an annotation by clicking the Annotate button. Adding an annotation is described in Starting the Alerts and Activities Display.
Command Button Area
In addition to the Annotate button in the notes pane, the command button area provides other ways to respond to alerts.
Table 3-5 Alerts and Activities Detail Page—Command Buttons
Refresh
Refreshes the tabular display.
Acknowledge
Changes the event status to Acknowledged. See Acknowledging an Alert for more information.
Clear
Clears and deletes alarms and events.
Suspend
Suspends polling and trap processing on the device or device component by opening a Detailed Device View (DDV), from which you can perform the suspend command. The DDV is described in Starting the Detailed Device View.
Notify
Sends e-mail notification of the alert. See Sending E-Mail in Response to an Alert for more information.
Close
Closes the Alerts and Activities Detail page.
Viewing Events Associated with an Alert
Use the tabular display in the Alerts and Activities Detail page to obtain more information about all of the events associated with a specific alert. In the tabular display, as shown in Figure 3-5, events with the latest change are listed first.
Events remain on the Alerts and Activities Detail page until the parent alert expires. If you suspend a device, all the events are cleared, but the alert remains active. (This way, users cannot remove important information from the display, and you can easily resume the device.)
If an event recurs, the existing event is not updated. Instead, the recurrence is shown as a new event with a new event ID.
Figure 3-5 provides an example of an Alerts and Activities Detail table.
Figure 3-5 Alerts and Activities Detail Page—Tabular Display
Table 3-6 defines the table elements. Click Refresh at the bottom of the page to refresh the table contents.
Tip
Table 3-6 Alerts and Activities Detail Tabular Display—Contents
Event identifier number. Clicking this link opens the event properties page (see Getting Event Details).
Note that this Event ID is not the same as the Event Code provided by Notification Services. For more information, see Customizing the Names of DFM Events.
DFM event name (as described in Events Processed). You can also change the names of DFM events to names that are more meaningful to you.
For information on changing DFM event names using Notification Customization, see Customizing the Names of DFM Events.
Device element on which the event occurred.
Time at which the event occurred.
Event status, based on last polling.
Active
Event is live.
Cleared
Event is no longer live. When the event has been in the Cleared state for 20 minutes, it expires and is removed from the display.
Note that events on suspended devices are moved to Cleared, but the alert remains active. See Suspending and Resuming Devices.
Suspended
Device is suspended.
Resumed
Device is being resumed.
Deleted
Device has been deleted.
A drop-down list of applications that can provide more information. The Tools drop-down list can include the following, depending upon the applications installed on your server:
•
•
•
•
Viewing Event Properties
The event properties page provides additional details about the event, such as the values of MIB attributes at the time of the event, polling and threshold information, and utilization information.
You can view VLAN properties on the event properties page, if applicable, although DFM does not display alerts generated on VLANs. The Detailed Device View will display to which VLAN ports belong (see Starting the Detailed Device View).
Step 1
The Alerts and Activities Detail page appears.
Step 2
The event properties page appears.
The information that is shown on the event properties page depends on the event type.
Clearing an Event
You can manually clear events. To do this:
Step 1
You are prompted to confirm if you want to clear the event.
Step 2
Step 3
or
Click Cancel to retain the event.
The event description window shows that the event was cleared.
Getting Device Information (Detailed Device View)
The Detailed Device View (DDV) provides extensive information on the devices and device components listed in Starting the Detailed Device View.
You can view information on devices that DFM is currently managing, as well as devices whose management you have suspended (regardless of whether the device is generating an alert):
•
•
•
See these topics for more information:
•
•
Starting the Detailed Device View
You can open a DDV for any device in the Alerts and Activities page—or for any known device in the DFM inventory (regardless of whether it is currently managed).
You cannot display a DDV for unidentified trap devices. For more information on unidentified traps, refer to Processed and Pass-Through Traps, and Unidentified Traps and Events
Step 1
•
•
The DDV opens. (See Figure 3-6 for an example.)
Step 2
The details table is populated.
If the item you select is the subdevice of an aggregated device—for example, an MSFC/RSM in a switch—the DDV will show the subdevice's managed state and device capability.
To display a complete DDV of the subcomponent, click the Launch New DDV For This Device.
If you want to suspend a managed device so it is no longer polled and its traps are no longer processed or if you want to resume a suspended device:
•
DFM no longer polls any device components, nor does it process any traps.
All alerts and activities change to the Cleared state, and the device is moved to the Suspended Devices view. Subsequent events (including traps) are ignored and no longer processed.
•
DFM resumes polling and trap processing on the device, and the device is moved out of the Suspended Devices view and back into its previous view.
If you resumed any devices and if you have completed your monitoring status changes, select Configuration > Polling and Thresholds > Apply Changes from the DFM home page so that DFM will resume polling according to the polling and threshold settings for the device.
Since this action is CPU-intensive, wait until you have made all of your monitoring status changes before you apply them.
Figure 3-6 provides an example of device information for a Cisco 3745 router.
Figure 3-6 Detailed Device View—Cisco 3745 Router
Component categories pane. See Component Categories Pane.
Command button area. See Command Buttons Area.
System information pane. See System Information Pane.
Launch information area. See Launch Information.
Record count. See Record Count.
Understanding the Detailed Device View
These topics provide details about the information in the DDV.
Component Categories Pane
The component categories pane lists the components of the device: Environment, System, and Interface (what is shown depends on the device being viewed). The following are some examples of what you may see in these categories:
•
•
•
From a DDV for an aggregate (containing) device, you can launch a DDV for the contained device. For example, for a router containing MSFCs, open a DDV for the router. From the router DDV, you can launch a new DDV for the MSFC.
System Information Pane
The system information pane provides information such as the system name, IP address, SysObjectID, system contact, and so forth. The device type determines what is displayed by the DDV.
If the system information pane lists an attribute with no value, it is because of one of the following reasons:
•
•
•
If the current view is of a parent (or containing) device—for example, a Catalyst 6513 switch with an MSFC card—the System Information Pane will contain a Launch New DDV For This Device button. If you click that button, a DDV for the MSFC is displayed.
You can suspend or resume device or component monitoring by clicking the Suspend or Resume button (The button shown depends on the component's current managed state). These functions are described in these sections:
•
•
Record Count
The record count lists the number of information types available on the device.
Command Buttons Area
In addition to the Suspend and Resume button in the system information pane, the command button area provides other ways to respond to alerts.
Table 3-7 Detailed Device View—Command Buttons
Get Troubleshooting Info
Launches a CiscoWorks Assistant Troubleshooting Report, which helps identify the cause of a device being unreachable. (For more information, see the User Guide for CiscoWorks Assistant 1.0.)
Refresh
Refreshes the DDV page. (The DDV is not automatically refreshed; you must do so manually.)
Close
Closes the DDV page.
Launch Information
The launch information tells you when the DDV was started. If you refresh the page, the time is updated.
Suspending Device and Element Monitoring
You can stop monitoring a device by selecting it and clicking the Suspend button in the DDV. Conversely, you can resume monitoring by clicking the Resume button. These actions are also available for suspending and resuming specific components.
See these topics for more information:
•
•
•
Suspending and Resuming Devices
When you unmanage a device (changing its managed state to False) DFM no longer polls that device for information. Subsequent events (including traps) are ignored and no longer processed.
When you suspend a device, all of the active events on the device are moved to the Cleared state, but the alert remains in the Active state. This happens to ensure that:
•
•
Note
Step 1
The DDV opens. Depending upon the managed state of the device, either the Suspend or the Resume button is shown.
Step 2
•
DFM no longer polls any device components, nor does it process any traps. All alerts and activities change to the Cleared state, and the device is moved to the Suspended Devices view. Subsequent events (including traps) are ignored and no longer processed.
Or
•
DFM resumes polling and trap processing on the device, and the device is moved out of the Suspended Devices view and back into its previous view.
If you resumed any devices (and you are finished making all of your monitoring status changes), select Configuration > Polling and Thresholds > Apply Changes from the DFM home page. This causes DFM to resume polling according to the polling and threshold settings for the device.
Since this action is CPU-intensive, wait until you have made all of your monitoring status changes before you apply them.
Suspending/Resuming a Single Device Component
You can unmanage or remanage device components using the DDV (cards, interfaces, ports, IP addresses, and so forth). If you unmanage a component, DFM will ignore subsequent events (including traps).
Note
Step 1
The DDV opens.
Step 2
Step 3
You can change the unmanaged state of an IP component of a device to managed state, only if its underlying interface is in managed state.
Step 4
If you resumed any devices (and you are finished making all of your monitoring status changes), select Configuration > Polling and Thresholds > Apply Changes from the DFM home page. This causes DFM to resume polling according to the polling and threshold settings for the device.
Since this action is CPU-intensive, wait until you have made all of your monitoring status changes before you apply them.
Figure 3-7 shows the location of the ManagedState column for one of the managed interfaces on a router.
Figure 3-7 Editing the Managed State of a Device Component
Performing Bulk Manage and Unmanage Operations
You can use ASL scripts to perform bulk manage and unmanage operations of interfaces, ports, IP addresses, processors, and memory, as described in this topic.
You can create and edit a generated file so that it reflects the management state you want. Later you can apply the change to the DFM inventory, so that DFM will use your new settings when gathering device information.
In the following procedures, NMSROOT represents the CiscoWorks installation directory. By default, these directories are:
•
•
Step 1
Step 2
Step 3
MANAGED_STATE:EXPLICITLY_MANAGED
MANAGED_STATE:EXPLICITLY_UNMANAGED
Step 4
:
The following example shows a session in which you can perform a bulk unmanage on interfaces.
# /opt/CSCOpx/objects/smarts/utils/getStateIntPort.kshGet Managed state for interfaces from DfmServerMAIN-N-Closing this log file at 13-Jan-2007 19:05:45; continuing in/opt/CSCOpx/objects/smarts/local/logs/expInterface.logGet Managed state for Ports from DfmServerMAIN-N-Closing this log file at 13-Jan-2007 19:05:49; continuing in/opt/CSCOpx/objects/smarts/local/logs/expPort.log# cd /opt/CSCOpx/objects/smarts/local/logsYou can open the exp.Interface.log file and locate the interfaces to be unmanaged:
INTERFACE:IF-12.9.150.46/2 MANAGED_STATE:MANAGEDINTERFACE:IF-12.9.150.76/5 MANAGED_STATE:MANAGEDINTERFACE:IF-12.9.150.63/2 MANAGED_STATE:MANAGED...You can change the MANAGED_STATE value:
INTERFACE:IF-12.9.150.46/2 MANAGED_STATE:EXPLICITLY_UNMANAGEDINTERFACE:IF-12.9.150.76/5 MANAGED_STATE:EXPLICITLY_UNMANAGEDINTERFACE:IF-12.9.150.63/2 MANAGED_STATE:EXPLICITLY_UNMANAGED...# /opt/CSCOpx/objects/smarts/utils/setStateIntPort.kshSet Managed state for interfaces for DfmServerMAIN-N-Closing this log file at 13-Jan-2007 19:12:18; continuing in/opt/CSCOpx/objects/smarts/local/logs/intfOut.logSet Managed state for Ports for DfmServerMAIN-N-Closing this log file at 13-Jan-2007 19:12:22; continuing in/opt/CSCOpx/objects/smarts/local/logs/portOut.logApply changes and reconfigure on DfmServerMAIN-N-Closing this log file at 13-Jan-2007 19:12:33; continuing in/opt/CSCOpx/objects/smarts/local/logs/apply.logAcknowledging, Annotating, and Sending E-Mail Notifications of Alerts
As shown in Figure 3-4, the Alerts and Activities Detail page provides command buttons in the bottom-right corner of the page. The Suspend button is discussed in Suspending Device and Element Monitoring.
This section explains how you can use the Acknowledge, Annotate, and Notify buttons to respond to alerts. It contains:
See these topics for more information:
•
Acknowledging an Alert
Acknowledging an active alert signals other users that you are aware of the alert. When you click Acknowledge on the Alerts and Activities Detail page, this status change is populated to all Alerts and Activities displays.
If an event on the alert recurs, the event status reverts to Active.
Step 1
A confirmation window opens.
Step 2
Annotating an Alert
You can annotate an alert by clicking Annotate from the Alerts and Activities Detail page. An editable Annotation dialog box opens; in the dialog box, you can enter up to 255 characters. An annotation will be shown whenever other users view the alert from an Alerts and Activities Detail page.
Step 1
The Annotation dialog box opens.
Step 2
Text that exceeds 255 characters will be truncated without warning. (If this happens, you can add another annotation.)
Step 3
The annotated text is displayed in the Notes box.
Figure 3-8 shows the Alerts and Activities Detail page, containing a previously created annotation.
Figure 3-8 Annotation on the Alerts and Activities Detail Page
Sending E-Mail in Response to an Alert
When you click the Notify button on the Alerts and Activities Detail page, DFM opens a dialog box that you can complete to manually send an e-mail notification to multiple recipients. The e-mail notification contains the text you add with any alert or event information.
If you want to send automatic e-mail notifications when alerts or events occur on certain devices, use Notification Services to set up an E-mail Notification subscription. See Managing E-Mail Notifications.
CiscoWorks Common Services controls the SMTP server used by DFM. For more information, from the Common Services home page, select Server > Admin > System Preferences, and click Help.
Step 1
The E-mail Notification Recipients dialog box opens.
Step 2
a.
•
•
b.
c.
d.
e.
f.
g.
