Table Of Contents

Event Processor

Using the Event Processor

Displaying the Event Processor

Returning to the Event Processor From Other Toolsets

Navigating the Event Processor Window

Using the Event Processor Tool Bar

Viewing the Event Display Pane

Assigning Event Priorities to Colors

Restricting Events

Exiting the Event Processor

Responding to Events

Analyzing Event Details

Selecting Event Details in the Troubleshooting Toolset

Acknowledging Events

Acknowledging an Individual Event

Acknowledging Multiple Events

Acknowledging All Logged Events

Using Event Memos

Attaching a Memo to an Event

Editing or Deleting an Existing Memo

Deleting Events

Saving and Printing Event Logs

Saving an Event Log

Printing an Event Log


Event Processor


The Event Processor intelligently reports on the state of your network. It displays events configured in ASEs through Performance Monitoring. Once configured, ASEs report events to the PAM as they occur. The PAM then notifies the PAC, which retrieves and displays the events. The Event Processor translates these network events into easy-to-understand descriptions.

Topics in this chapter include:

"Using the Event Processor"—includes launching, displaying, and exiting the Event Processor. Also orients you to options such as assigning priorities to events and restricting the display of events.

"Responding to Events" section—describes how to respond to events

"Saving and Printing Event Logs" section—describes how to save and print the event logs.

For information about configuring ASE event settings, see "Performance Monitoring."

Using the Event Processor

The Event Processor window is the home window of the Cisco WAPMS PAC. It opens when you start Cisco WAPMS, and you can open all other Toolsets from it.

Displaying the Event Processor

This section describes how to display the Event Processor.

Returning to the Event Processor From Other Toolsets

When you launch Traffic Capture or Troubleshooting, the Toolset replaces the Event Processor in the current window. You can return to the Event Processor by:

selecting File  >  Close in the current Toolset

clicking Event Processor on the Toolset Selector

selecting Toolsets >  Event Processor from the Menu bar

When you launch Planning and Reporting or Conversations, the Event Processor remains open in a separate window. You can return to the Event Processor by:

selecting File  >  Exit in the current Toolset window

minimizing the current Toolset

When you launch Network Configuration, Performance Monitoring, or choose from the File or Setup menus, the resulting window overlays the Event Processor in the active window. To return to the Event Processor, close the active Toolset's window.

Navigating the Event Processor Window

Use the Event Processor window, shown in Figure 5-1, to configure ASE events (for example, assigning event priorities to colors by clicking the Setup button in the Unacknowledged Event Summary by Priority Group pane), examine ASE events (by examining the messages displayed in the Events, Location, Event Type, and Date and Time columns), customize the display (by using the options in the Restrict Displayed Events to pane), and respond to events (by using the Ack and Priority boxes).

See the following sections for detailed information about this window and how to accomplish various tasks.

Figure 5-1 Event Processor Window

Using the Event Processor Tool Bar

Use the Event Processor Tool bar, shown in Figure 5-2, to access Performance Monitoring to configure events you want reported to the Event Processor. See "Performance Monitoring," for details.

You can also use the Tool bar to acknowledge all or displayed events. The Tool bar also shows the total number of displayed events. See the "Acknowledging Events" section.

Figure 5-2 Event Processor Tool Bar

Show or Hiding the Event Processor Tool Bar

From the Event Processor, select or deselect View > Event Processor Toolbar.

Viewing the Event Display Pane

The Event Display pane, shown in Figure 5-3, provides a detailed listing of network events generated by ASEs configured in your network database. For more information about configuring events are configured, see "Performance Monitoring."

By default, the Event Processor displays up to 5,000 reported events in the current domain. Use the scroll bar on the right to scroll through the displayed events. The number of displayed events is shown on the right side of the Event Processor Tool bar. An asterisk (*) next to the number indicates more than 5,000 events exist in the short-term database.

Figure 5-3 Event Display Pane

Table 5-1 describes the elements in the Event Display pane.

Table 5-1 Event Display Pane Fields 

Field
Description

Ack

Choose to acknowledge a reported event has been read or worked on.

Priority

Sets the priority of the event as defined in the Performance Monitoring Setup window or Domain Options window. Until you acknowledge an event, its color corresponds to the color bar in the Event Summary pane. After you acknowledge the event, the priority box turns gray.

Event

Description of the reported event.

Location

Site information where the event occurred.

Event Type

Network element in which the event occurred. For more information on event types, see "Network Events."

Date and Time

Date and time the event was reported by the ASE.

Add/Edit Memo

Click to attach a memo or edit a previously created memo.


Assigning Event Priorities to Colors

The Priority Groups pane of the Event Processor window, shown in Figure 5-4, displays event information by event priority, ranging from lowest (yellow) to highest (red). Use this pane to assign event priorities to colors.

Figure 5-4 Priority Groups Pane

When an event is initially reported to the PAC and displayed in the Event Display pane (Figure 5-3), the appropriate color bar flashes, bringing the new event to your attention. The color bar flashes until you click it, indicating you are aware of the event. When multiple events of the same priority are reported, click the flashing color bar once to stop the flashing. A counter beneath each color bar displays the total number of unacknowledged events corresponding to the priority range represented by the bar.

For example, the priority groups shown in Figure 5-4 indicate eight unacknowledged events of priority 1 through 50, four unacknowledged events of priority 51 through 100, zero unacknowledged events of priority 101 through 150, zero unacknowledged events of priority 151 through 200, and three unacknowledged events of priority 201 through 256.

To assign priorities to statistical threshold event types in Performance Monitoring, see the "Configuring Statistical Threshold Events" section. To assign priorities to state-change event types using the Domain Options window, see the "Setting Global Event Priorities" section.


Step 1 In the Priority Groups pane, click Setup.

The Event Summary Setup window, shown in Figure 5-5, appears.

Figure 5-5 Event Summary Setup Window

Step 2 In the Event Summary Setup window, specify the priority range to be associated with each color bar, then click OK.

The valid range is 1-255.


Restricting Events

By default, Cisco WAPMS reports all configured events from a domain in the Event Processor when the PAC is launched. Events remain in the PAC's short-term database for two weeks. For a large network, this can result in an unmanageable number of events displayed in the Event Processor window. Using options in the Restrict Displayed Events pane of the window, you can restrict the number of events displayed by network element, acknowledgement state, priority, and chronological order (see Figure 5-6).

Figure 5-6 Event Processing Window - Restrict Displayed Events Pane

Restricting Displayed Events According to Access Line


Step 1 In the Restrict Displayed Events To pane, click Select. The Select Network Element for Viewing window, shown in Figure 5-7, appears.

Figure 5-7 Select Network Element for Viewing Window

Step 2 Choose the access lines for which to display events:

to display all events for all access lines configured in the PAC, click Select All

to deselect all selected access lines configured in the PAC, click Clear All

to display events according to network association, click Network. Choose your networks from the network list displayed

to display events according to site association, click Site. Choose your sites from the site list displayed.

Step 3 Click OK to confirm your selections.

The window closes and the Event Processor window appears.

Step 4 In the Restrict Displayed Events To pane, choose the Selected Network Element option.

Events are displayed for just those access lines specified in Step 2.


Displaying Only Unacknowledged Events

In the Restrict Displayed Events To pane, choose the Unacknowledged Events option to display unacknowledged events only. Clear this option to display all events.

Restricting Displayed Events According to Priority


Step 1 Choose the Priority Range option, then click Edit.

Step 2 In the range fields, enter the priority range of events to display, then click OK.

Valid values are from 1 to 255.


Displaying Events in Chronological Order

Click Oldest First or, to reverse the order, click Newest First.

Exiting the Event Processor

Choose File  >  Exit in the Event Processor window. Cisco WAPMS is closed, including any Toolsets running in the background. If either the Planning and Reporting or Conversations Toolset was open, you are prompted to exit it first, then you must choose File  >  Exit again in the Event Processor window.

Responding to Events

With an understanding of events, you can respond to them from the Event Processor window. Causes and corrective actions for ASE events are described in "Network Events."

Analyzing Event Details

Before you respond to an event in the Event Processor window, you may want to analyze it in more detail through the Troubleshooting Toolset.

Selecting Event Details in the Troubleshooting Toolset


Step 1 In the Event Display pane, click anywhere on the event.

A triangle to the left of the event indicates it is selected.

Step 2 Using the Toolset Selector, click Troubleshooting, or choose Toolset >  Troubleshooting from the Menu bar.

A Summary window in the Troubleshooting Toolset appears, showing the state of the access line, access channel, or circuit (depending on the event) when the event occurred.

For information on interpreting graphs and statistics displayed in the Troubleshooting Toolset, see "Troubleshooting."


Acknowledging Events

Acknowledging a reported event distinguishes that the event has been read or noticed. You can acknowledge events individually, in selective groups, or all at once.

When the acknowledge options are unavailable, your user ID does not have permission to acknowledge events. Contact your PAM administrator.

Acknowledging an Individual Event

In the Event Display pane, choose the Ack option to the left of the event. A check in the Ack box indicates the event has been acknowledged.

Acknowledging Multiple Events


Step 1 Restrict the events displayed in the Event Processor window so only the events meeting your criteria are displayed. See the "Restricting Events" section.

Step 2 Click Acknowledge Displayed on the Event Processor Tool bar.

All displayed events are acknowledged.


Acknowledging All Logged Events

Click Acknowledge All on the Event Processor Tool bar. All logged events to view and acknowledge within the scope of your user ID permission are acknowledged.

Using Event Memos

You can attach memos of up to 512 characters to reported events. Memos are useful for tracking the resolution of a problem associated with a particular event, and for passing relevant information between operator shifts.

When the Add Memo and Edit Memo buttons are unavailable, your user ID does not have permission to create or edit memos. Contact your PAM administrator.

Attaching a Memo to an Event


Step 1 Click the Add Memo button to the right of the event description.

Figure 5-8 Event Log Memo Field

Step 2 Enter your memo, then click OK.

The Add Memo button changes to Edit Memo, indicating the event has a memo.


Editing or Deleting an Existing Memo


Step 1 Click the Edit Memo button to the right of the event description.

Step 2 Edit the memo text or delete it all, then click OK.


Deleting Events

You cannot manually delete events from the Event Processor using the PAC. The PAM, however, automatically deletes events from the short-term database when they are two weeks old. The PAM also stores event logging information and all network performance data in its long-term database in 1-hour increments for a set number weeks (52 by default). PAM short-term and long-term database data may also be archived during routine database maintenance. (See Chapter 6, "Managing the Database Using PAM Manager," in the Cisco WAN Access Performance Management System System Administration Guide, 2.0.)

Saving and Printing Event Logs

You can save or print displayed events to a log file. When you print or save, keep in mind displayed events includes all events available in the scroll list (up to a maximum of 5,000), not just those events currently displayed in the window. The Event Processor Tool bar indicates the total of all events the Event Processor window can display (see Figure 5-2).

Saving an Event Log


Step 1 From the Event Processor window, choose File  >  Save As.

Step 2 Enter a name for the log, then click OK.

All displayed events are saved as a comma-delimited text file, which can then be imported into spreadsheet and database applications, such as Excel or Access.


Printing an Event Log


Step 1 From the Event Processor window, choose File  >  Print.

Step 2 Under Report Type, choose either Displayed Events, Sorted by Date, or All Events, Sorted by Site.

All Events refers to all the events configured for the ASE to report, including any events you may have restricted from being displayed in the Event Processor window.

Step 3 Click OK. Information for the selected events is printed to the printer you specify.