Administrator's and User's Guide for SFM HP-UX 11i v3 September 2012

Table 26 Troubleshooting EVWEB (continued)
SolutionCauseProblem
To disable EMS logging events to syslog, complete the following
steps:
The syslog functionality
is available from SFM
Both EMS and SFM log
the same symptom in the
syslog. Version C.06.00.07.01,
1. Delete the monitoring request using monconfig. Enter the
following command to delete the monitoring request:
# /etc/opt/resmon/lbin/monconfig
September 2009
release, to provide a
summary of event
information of critical
2. Select the delete option to delete the request.
(D)elete a monitoring request
and serious events. The
default subscription to
3. The current monitor configuration is:
1) Send events generated by all monitors
with severity >= MAJOR WARNING to SYSLOG
syslog
HP_defaultSyslog is
configured. When events
with major or critical
2) Send events generated by all monitors
with severity >= INFORMATION to TEXTLOG
levels are detected at
/var/opt/resmon/log/event.log
SFM diag mode, an
3) Send events generated by all monitors
event is sent to the EMS
with severity >= MAJOR WARNING to EMAIL root
framework through the
WBEM Wrapper
4) Send events generated by monitors
/storage/events/disks/default
Monitor or the EMS
with severity > CRITICAL to SNMP
Wrapper Monitor. EMS
5) Send events generated by monitors
is configured to log
/storage/events/disks/default
events with Major
with severity > MAJOR WARNING to SNMP
Warning, Serious or
6) Send events generated by monitors
Critical severity levels to
/system/events/ipmi_fpl
with severity = CRITICAL to SNMP
the syslog. Even after
with comment:
switching to the EMS
no
mode, the same
behavior occurs.
7) Send events generated by monitors
/system/events/memory_ia64
/system/events/system_status
with severity = CRITICAL to SNMP
Enter number of monitoring request to delete
{(Q)uit,(H)elp} 1
4. Enter 1 to delete events with MAJOR WARNING severity.
5. To disable the email facility from EMS, delete the following
monitoring request using monconfig:
3) Send events generated by all monitors
with severity >= MAJOR WARNING to EMAIL
root
Install HP Operations Manager Software for UNIX agent (HTTPS)
on HP-UX. Configure a policy used by HTTPS agent to monitor
WBEM indications logged in syslog as follows:
SFM does not provide
the same functionality as
EMS
The OpCmsg notification
is not available in SFM
MMM DD HH:MM:SS xxxxx CIM Indication (default
format):ProviderName =
SEL02_IndicationProvider, PerceivedSeverity =
2, EventID = 103
MMM DD HH:MM:SS xxxxx CIM Indication (default
format):EventID = 8, PerceivedSeverity = 2,
ProviderName = StateChangeIndicationProvider
For more information, see the HP Operations Manager Software
for UNIX documentation.
For the property order logged in syslog, see “ Syslog property
order” (page 122)
94 Troubleshooting SFM