Learn more about: 1) Alarm Severity levels 2) Threshold violation alarms 3) VMware, Eventlogs ; SNMP traps and syslogs 4) Notifications 5)Using an IT workflow to remediate problems

2. Welcome to a free OpManager training
session

3. Trainer
Sharath Babu
Techinal Support Engineer

4. Part 4
Fault management and IT automation

5. Agenda
Alarm severity levels
Threshold violation alarms
Other alarms : VMWare; Event logs; SNMP traps and Syslogs
Notifications
Using an IT workflow to remediate problems

6. Severity Color code
Attention
Trouble
Critical
Service down
Clear
Alarm severity levels

7. Device down
Interface down
Severity: predefined

8. Process down
Service down
URL down
Severity: predefined

9. Event log
Syslog
SNMP trap
Severity: configurable

10. • Configuring threshold values on an individual device
• Configuring consecutive times
• Configuring rearm value to clear fault alarms
• Using device templates to configure thresholds globally based on device
Threshold-based alarms

11. Alarms for inventory changes
o vMotion
o Host added/removed
o Host or VMs connected/disconnected
o VMs powered on/off
o VMs orphaned
o Scheduled task removed
o Etc.
Querying more events from the Vcenter server / ESX host
VMware events

12. Event log alarms
Prerequisites
o Check if WMI and RPC services are enabled on the Windows servers
o Default WMI ports: 135 & 445, 5000 to 6000 (TCP)
• Configuring event logs for a Windows server in OpManager
• Ignoring a specific event log from a Windows server
• Creating custom Eventlogs

13. SNMP trap alarms
OpManage
r
Trap-
Receiver
Router
Switch
Firewall
Server
SNMP Agent
Management
Definitions
Management
Database
Trap
(162)
5things you should know about SNMP traps in OpManager
1. Unsolicited traps
2. Loading traps from MIB files
3. Filtering trap messages
4. Customizing trap messages
5. Forwarding trap messages to another NMS platform

14. #1 Unsolicited traps
I have configured a Router to forward SNMP traps
to OpManager's server. However I don't get to see
an alarm? How do I fix this?
Things to verify :
 Verify whether the Router is added to OpManager
 Verify whether the 'Trap rule' is available for the respective
event
 Verify whether the trap event is listed under 'Unsolicited traps'
Solution : Identify the event from the 'Unsolicited traps' and add a new trap rule

15. #2 Loading traps from MIB files
Prerequisites
• Vendor MIBs
Mibs
• What is a mib file?
• How to obtain the mib file?
• Uploading the mib files in OpManager
• Loading trap from mibs
Examples
• Loading traps for compaq proliant servers using the vendor mib
CPQHLTH-MIB
I don't want to manually add the trap rules one by
one.
How do I upload the trap rules in a bulk?

16. #3 Filtering the trap messages
I have a Windows server added to OpManager. It triggers
100s of trap events with various messages from x.x.x.x
OID. However I want to filter the trap event only if the
priority is 'critical' and clear the event automatically when
the priority is 'low'? How do I achieve this?
Know
• What is a varbind?
• How to identify the varbinds from trap event?
Solution : Use 'match criteria' to filter and clear the trap alarms based on
'varbinds'

17. #4 Customizing the trap messages

18. #5 Forwarding trap messages
192.168.70.1
162
NMS server 162
public
1. Forwarding the received SNMP traps to the desired
destination.
1 2
2. Converting the alerts received in OpManager into a trap alert to a desired
destination.

19. Syslog alarms
Prerequisites :
o Configure devices to forward syslog events to OpManager's server
o Default ports: 514 & 519 (UDP); configurable
• Creating a syslog rule
o Syslog receiver
• Using facility name, severity, or match text to filter and clear syslog
alarms (regex format)
• Identifying the syslog flow rate from OpManager
• Forwarding syslog messages to another NMS platform

20. Profile Type
• Email/SMS
• Run system
command
• Run a program
• Log a ticket
• Send
syslogs/traps
Criteria
• Missed polls
• Hardware
condition
• Threshold
violation
• Agent status
• Severity level
Device
Selection
• Individual
devices
• Category
• Business views
Schedule
• Time Window
• Delayed Trigger
• Recurring
Trigger
Preview
• Test Action
• Save and
Execute
Notification profiles in OpManager

21. #1 Email notification
Steps :
1. Configure mail server settings
2. Create a notification profile for 'email';
- Select the required 'alarm criteria';
- Associate the profile with 'required devices';
I want to receive an email notification
for all service down alarms.
How do I configure this?

22. #2 Log a ticket
Steps :
1. Setting up the integration with ServiceDesk
Plus
2. Create a notification profile for 'log a ticket';
- Select the 'category, group and technician';
- Select the required 'alarm criteria';
- Associate the profile with 'required devices';
I want OpManager to create a ticket in ServiceDesk
Plus whenever a problem is detected in the
interface. The ticket should have the fields like
category, group and technician filled automatically.

23. Automate fault management with IT workflow
Create a workflow Associate devices Schedule/trigger tasks
1 2 3

24. Free up disk space on the server

25. ebooks.opmanager.c
om

26. Questions?

27. www.manageengine.com
THANK YOU
Sharath Babu
sharathbabu.r@zohocorp.com