This document summarizes a training session on fault management and IT automation using OpManager. It includes an agenda covering alarm severity levels, threshold violation alarms, alarms from event logs, SNMP traps, syslog alarms, and notifications. It also discusses using IT workflows to automate problem remediation.

2. Welcome to a
free OpManager training session

3. Can you hear me? Can you see
the presentation?
Please confirm by commenting in the webinar chat panel

4. Trainer
Srikanth V
Techincal Support Engineer

5. Part 4
Fault management and IT automation

6. Agenda
 Alarm severity levels
 Threshold violation alarms
 Other alarms : VMWare; Event logs; SNMP traps and
Syslogs
 Notifications
 Using an IT workflow to remediate problems

7. Severity Color code
Attention
Trouble
Critical
Service down
Clear
Alarm severity levels

8. Device down Interface down
Severity: predefined

9. Process down
Service down
URL down
Severity: predefined

10. Event log
Syslog
SNMP trap
Severity: configurable

11. • Configuring threshold values on an individual device
• Configuring consecutive times
• Configuring rearm value to clear fault alarms
• Using device templates to configure thresholds globally based on device type
Threshold-based alarms

12. Alarms for inventory changes
o vMotion
o Host added/removed
o Host or VMs connected/disconnected
o VMs powered on/off
o VMs orphaned
o Scheduled task removed
o Etc.
Querying more events from the Vcenter server / ESX host
VMware events

13. Event log alarms
Prerequisites
o Check if WMI and RPC services are enabled on the Windows servers
o Default WMI ports: 135 & 445, 5000 to 6000 (TCP)
• Configuring event logs for a Windows server in OpManager
• Ignoring a specific event log from a Windows server
• Creating custom Eventlogs

14. SNMP trap alarms
OpManage
r
Trap- Receiver
Router
Switch
Firewall
Server
SNMP Agent
Management
Definitions
Management
Database
Trap
(162)
5things you should know
about SNMP traps in
OpManager
1. Unsolicited traps
2. Loading traps from MIB files
3. Filtering trap messages
4. Customizing trap messages
5. Forwarding trap messages to another NMS
platform

15. #1 Unsolicited traps
I have configured a Router to forward SNMP traps to OpManager's server.
However I don't get to see an alarm? How do I fix this?
Things to verify :
 Verify whether the Router is added to OpManager
 Verify whether the 'Trap rule' is available for the respective event
 Verify whether the trap event is listed under 'Unsolicited traps'
Solution : Identify the event from the 'Unsolicited traps' and add a new trap rule

16. #2 Loading traps from MIB files
Prerequisites
• Vendor MIBs
Mibs
• What is a mib file?
• How to obtain the mib file?
• Uploading the mib files in OpManager
• Loading trap from mibs
Examples
• Loading traps for compaq proliant servers using the vendor mib CPQHLTH-MIB
I don't want to manually add the trap rules one by one.
How do I upload the trap rules in a bulk?

17. #3 Filtering the trap messages
I have a Windows server added to OpManager. It triggers 100s of trap events with various
messages from x.x.x.x OID. However I want to filter the trap event only if the priority is
'critical' and clear the event automatically when the priority is 'low'? How do I achieve this?
Know
• What is a varbind?
• How to identify the varbinds from trap event?
Solution : Use 'match criteria' to filter and clear the trap alarms based on 'varbinds'

18. #4 Customizing the trap messages

19. #5 Forwarding trap messages
192.168.70.1
162
NMS server 162
public
1. Forwarding the received SNMP traps to the desired destination.
2. Converting the alerts received in OpManager into a trap alert to a desired
destination.
1 2

20. Syslog alarms
Prerequisites :
o Configure devices to forward syslog events to OpManager's server
o Default ports: 514 & 519 (UDP); configurable
• Creating a syslog rule
o Syslog receiver
• Using facility name, severity, or match text to filter and clear syslog alarms (regex format)
• Identifying the syslog flow rate from OpManager
• Forwarding syslog messages to another NMS platform

21. Profile Type
• Email/SMS
• Run system command
• Run a program
• Log a ticket
• Send syslogs/traps
Criteria
• Missed polls
• Hardware
condition
• Threshold violation
• Agent status
• Severity level
Device
Selection
• Individual
devices
• Category
• Business views
Schedule
• Time Window
• Delayed
Trigger
• Recurring
Trigger
Preview
• Test Action
• Save and
Execute
Notification profiles in OpManager

22. #1 Email notification
Steps :
1. Configure mail server settings
2. Create a notification profile for 'email';
- Select the required 'alarm criteria';
- Associate the profile with 'required devices';
I want to receive an email notification for all service down
alarms.
How do I configure this?

23. #2 Log a ticket
Steps :
1. Setting up the integration with ServiceDesk Plus
2. Create a notification profile for 'log a ticket';
- Select the 'category, group and technician';
- Select the required 'alarm criteria';
- Associate the profile with 'required devices';
I want OpManager to create a ticket in ServiceDesk Plus whenever a problem is detected in the interface.
The ticket should have the fields like category, group and technician filled automatically.

24. Automate fault management with IT workflow
Create a workflow Associate devices
Schedule/trigger
tasks
1 2 3

25. Free up disk space on the server

26. Questions?

27. Panelist
Sharath Babu
Product Expert

28. youtube.com/opmanagertechvideos
help.opmanager.com
opmanager-support@manageengine.com
+1.888.720.9500 / +1.408.916.9400
Need more help?
forums.manageengine.com/opmanager

29. THANK YOU
opmanager-support@manageengine.com