Table Of Contents
Event Processor
Using the Event Processor
Displaying the Event Processor
Returning to the Event Processor From Other Toolsets
Navigating the Event Processor Window
Using the Event Processor Tool Bar
Viewing the Event Display Pane
Assigning Event Priorities to Colors
Restricting Events
Exiting the Event Processor
Responding to Events
Analyzing Event Details
Selecting Event Details in the Troubleshooting Toolset
Acknowledging Events
Acknowledging an Individual Event
Acknowledging Multiple Events
Acknowledging All Logged Events
Using Event Memos
Attaching a Memo to an Event
Editing or Deleting an Existing Memo
Deleting Events
Saving and Printing Event Logs
Saving an Event Log
Printing an Event Log
Event Processor
The Event Processor intelligently reports on the state of your network. It displays events configured in ASEs through Performance Monitoring. Once configured, ASEs report events to the PAM as they occur. The PAM then notifies the PAC, which retrieves and displays the events. The Event Processor translates these network events into easy-to-understand descriptions.
Topics in this chapter include:
•"Using the Event Processor"—includes launching, displaying, and exiting the Event Processor. Also orients you to options such as assigning priorities to events and restricting the display of events.
•"Responding to Events" section—describes how to respond to events
•"Saving and Printing Event Logs" section—describes how to save and print the event logs.
For information about configuring ASE event settings, see "Performance Monitoring."
Using the Event Processor
The Event Processor window is the home window of the Cisco WAPMS PAC. It opens when you start Cisco WAPMS, and you can open all other Toolsets from it.
Displaying the Event Processor
This section describes how to display the Event Processor.
Returning to the Event Processor From Other Toolsets
•When you launch Traffic Capture or Troubleshooting, the Toolset replaces the Event Processor in the current window. You can return to the Event Processor by:
–selecting File > Close in the current Toolset
–clicking Event Processor on the Toolset Selector
–selecting Toolsets > Event Processor from the Menu bar
•When you launch Planning and Reporting or Conversations, the Event Processor remains open in a separate window. You can return to the Event Processor by:
–selecting File > Exit in the current Toolset window
–minimizing the current Toolset
•When you launch Network Configuration, Performance Monitoring, or choose from the File or Setup menus, the resulting window overlays the Event Processor in the active window. To return to the Event Processor, close the active Toolset's window.
Navigating the Event Processor Window
Use the Event Processor window, shown in Figure 5-1, to configure ASE events (for example, assigning event priorities to colors by clicking the Setup button in the Unacknowledged Event Summary by Priority Group pane), examine ASE events (by examining the messages displayed in the Events, Location, Event Type, and Date and Time columns), customize the display (by using the options in the Restrict Displayed Events to pane), and respond to events (by using the Ack and Priority boxes).
See the following sections for detailed information about this window and how to accomplish various tasks.
Figure 5-1 Event Processor Window
Using the Event Processor Tool Bar
Use the Event Processor Tool bar, shown in Figure 5-2, to access Performance Monitoring to configure events you want reported to the Event Processor. See "Performance Monitoring," for details.
You can also use the Tool bar to acknowledge all or displayed events. The Tool bar also shows the total number of displayed events. See the "Acknowledging Events" section.
Figure 5-2 Event Processor Tool Bar
Show or Hiding the Event Processor Tool Bar
From the Event Processor, select or deselect View > Event Processor Toolbar.
Viewing the Event Display Pane
The Event Display pane, shown in Figure 5-3, provides a detailed listing of network events generated by ASEs configured in your network database. For more information about configuring events are configured, see "Performance Monitoring."
By default, the Event Processor displays up to 5,000 reported events in the current domain. Use the scroll bar on the right to scroll through the displayed events. The number of displayed events is shown on the right side of the Event Processor Tool bar. An asterisk (*) next to the number indicates more than 5,000 events exist in the short-term database.
Figure 5-3 Event Display Pane
Table 5-1 describes the elements in the Event Display pane.
Table 5-1 Event Display Pane Fields
Field
|
Description
|
Ack
|
Choose to acknowledge a reported event has been read or worked on.
|
Priority
|
Sets the priority of the event as defined in the Performance Monitoring Setup window or Domain Options window. Until you acknowledge an event, its color corresponds to the color bar in the Event Summary pane. After you acknowledge the event, the priority box turns gray.
|
Event
|
Description of the reported event.
|
Location
|
Site information where the event occurred.
|
Event Type
|
Network element in which the event occurred. For more information on event types, see "Network Events."
|
Date and Time
|
Date and time the event was reported by the ASE.
|
Add/Edit Memo
|
Click to attach a memo or edit a previously created memo.
|
Assigning Event Priorities to Colors
The Priority Groups pane of the Event Processor window, shown in Figure 5-4, displays event information by event priority, ranging from lowest (yellow) to highest (red). Use this pane to assign event priorities to colors.
Figure 5-4 Priority Groups Pane
When an event is initially reported to the PAC and displayed in the Event Display pane (Figure 5-3), the appropriate color bar flashes, bringing the new event to your attention. The color bar flashes until you click it, indicating you are aware of the event. When multiple events of the same priority are reported, click the flashing color bar once to stop the flashing. A counter beneath each color bar displays the total number of unacknowledged events corresponding to the priority range represented by the bar.
For example, the priority groups shown in Figure 5-4 indicate eight unacknowledged events of priority 1 through 50, four unacknowledged events of priority 51 through 100, zero unacknowledged events of priority 101 through 150, zero unacknowledged events of priority 151 through 200, and three unacknowledged events of priority 201 through 256.
To assign priorities to statistical threshold event types in Performance Monitoring, see the "Configuring Statistical Threshold Events" section. To assign priorities to state-change event types using the Domain Options window, see the "Setting Global Event Priorities" section.
Step 1 In the Priority Groups pane, click Setup.
The Event Summary Setup window, shown in Figure 5-5, appears.
Figure 5-5 Event Summary Setup Window
Step 2 In the Event Summary Setup window, specify the priority range to be associated with each color bar, then click OK.
The valid range is 1-255.
Restricting Events
By default, Cisco WAPMS reports all configured events from a domain in the Event Processor when the PAC is launched. Events remain in the PAC's short-term database for two weeks. For a large network, this can result in an unmanageable number of events displayed in the Event Processor window. Using options in the Restrict Displayed Events pane of the window, you can restrict the number of events displayed by network element, acknowledgement state, priority, and chronological order (see Figure 5-6).
Figure 5-6 Event Processing Window - Restrict Displayed Events Pane
Restricting Displayed Events According to Access Line
Step 1 In the Restrict Displayed Events To pane, click Select. The Select Network Element for Viewing window, shown in Figure 5-7, appears.
Figure 5-7 Select Network Element for Viewing Window
Step 2 Choose the access lines for which to display events:
•to display all events for all access lines configured in the PAC, click Select All
•to deselect all selected access lines configured in the PAC, click Clear All
•to display events according to network association, click Network. Choose your networks from the network list displayed
•to display events according to site association, click Site. Choose your sites from the site list displayed.
Step 3 Click OK to confirm your selections.
The window closes and the Event Processor window appears.
Step 4 In the Restrict Displayed Events To pane, choose the Selected Network Element option.
Events are displayed for just those access lines specified in Step 2.
Displaying Only Unacknowledged Events
In the Restrict Displayed Events To pane, choose the Unacknowledged Events option to display unacknowledged events only. Clear this option to display all events.
Restricting Displayed Events According to Priority
Step 1 Choose the Priority Range option, then click Edit.
Step 2 In the range fields, enter the priority range of events to display, then click OK.
Valid values are from 1 to 255.
Displaying Events in Chronological Order
Click Oldest First or, to reverse the order, click Newest First.
Exiting the Event Processor
Choose File > Exit in the Event Processor window. Cisco WAPMS is closed, including any Toolsets running in the background. If either the Planning and Reporting or Conversations Toolset was open, you are prompted to exit it first, then you must choose File > Exit again in the Event Processor window.
Responding to Events
With an understanding of events, you can respond to them from the Event Processor window. Causes and corrective actions for ASE events are described in "Network Events."
Analyzing Event Details
Before you respond to an event in the Event Processor window, you may want to analyze it in more detail through the Troubleshooting Toolset.
Selecting Event Details in the Troubleshooting Toolset
Step 1 In the Event Display pane, click anywhere on the event.
A triangle to the left of the event indicates it is selected.
Step 2 Using the Toolset Selector, click Troubleshooting, or choose Toolset > Troubleshooting from the Menu bar.
A Summary window in the Troubleshooting Toolset appears, showing the state of the access line, access channel, or circuit (depending on the event) when the event occurred.
For information on interpreting graphs and statistics displayed in the Troubleshooting Toolset, see "Troubleshooting."
Acknowledging Events
Acknowledging a reported event distinguishes that the event has been read or noticed. You can acknowledge events individually, in selective groups, or all at once.
When the acknowledge options are unavailable, your user ID does not have permission to acknowledge events. Contact your PAM administrator.
Acknowledging an Individual Event
In the Event Display pane, choose the Ack option to the left of the event. A check in the Ack box indicates the event has been acknowledged.
Acknowledging Multiple Events
Step 1 Restrict the events displayed in the Event Processor window so only the events meeting your criteria are displayed. See the "Restricting Events" section.
Step 2 Click Acknowledge Displayed on the Event Processor Tool bar.
All displayed events are acknowledged.
Acknowledging All Logged Events
Click Acknowledge All on the Event Processor Tool bar. All logged events to view and acknowledge within the scope of your user ID permission are acknowledged.
Using Event Memos
You can attach memos of up to 512 characters to reported events. Memos are useful for tracking the resolution of a problem associated with a particular event, and for passing relevant information between operator shifts.
When the Add Memo and Edit Memo buttons are unavailable, your user ID does not have permission to create or edit memos. Contact your PAM administrator.
Attaching a Memo to an Event
Step 1 Click the Add Memo button to the right of the event description.
Figure 5-8 Event Log Memo Field
Step 2 Enter your memo, then click OK.
The Add Memo button changes to Edit Memo, indicating the event has a memo.
Editing or Deleting an Existing Memo
Step 1 Click the Edit Memo button to the right of the event description.
Step 2 Edit the memo text or delete it all, then click OK.
Deleting Events
You cannot manually delete events from the Event Processor using the PAC. The PAM, however, automatically deletes events from the short-term database when they are two weeks old. The PAM also stores event logging information and all network performance data in its long-term database in 1-hour increments for a set number weeks (52 by default). PAM short-term and long-term database data may also be archived during routine database maintenance. (See Chapter 6, "Managing the Database Using PAM Manager," in the Cisco WAN Access Performance Management System System Administration Guide, 2.0.)
Saving and Printing Event Logs
You can save or print displayed events to a log file. When you print or save, keep in mind displayed events includes all events available in the scroll list (up to a maximum of 5,000), not just those events currently displayed in the window. The Event Processor Tool bar indicates the total of all events the Event Processor window can display (see Figure 5-2).
Saving an Event Log
Step 1 From the Event Processor window, choose File > Save As.
Step 2 Enter a name for the log, then click OK.
All displayed events are saved as a comma-delimited text file, which can then be imported into spreadsheet and database applications, such as Excel or Access.
Printing an Event Log
Step 1 From the Event Processor window, choose File > Print.
Step 2 Under Report Type, choose either Displayed Events, Sorted by Date, or All Events, Sorted by Site.
All Events refers to all the events configured for the ASE to report, including any events you may have restricted from being displayed in the Event Processor window.
Step 3 Click OK. Information for the selected events is printed to the printer you specify.