[INUG-Users] Advanced Correlation

[Abhishek Rvrk Sharma]

Hi folks,

 

I was having problems while looking at the NCKL correlation rule files -
There are a lot of probe variables I saw in the files ( in the
AdvCorr36.include.rules file etc. ), for which I cannot understand what
values are being taken - from what I understand, the only values the
syslog probe exposes to the rules file are the token values - Are there
certain probe variable values that the syslog probe sends along with the
token values?

 

I am doing some work on understanding the correlation in the NCKL - help
would be appreciated :-)

 

########################################################################
#######

#

#    Licensed Materials - Property of IBM

#

#    (C) Copyright IBM Corp. 2006

#    All Rights Reserved

#

#    AdvCorr36.include.compat.rules 1.1

#    2005/03/01 Robert Cowart

#

########################################################################
#######

########################################################################
#######

#

# 1.1 - Modified to support AdvCorrCauseType.

#

#     - Added basic debug logging.

#

# 1.0 - Initial Release.

#

########################################################################
#######

##########################################################

#>> This was included in the Syslog probe

#>> NCKL rulefile - where are these values coming from?

#########################################################

 

log(DEBUG, "<<<<< Entering... AdvCorr36.include.compat.rules >>>>>")

 

@CorrScore = $OS_CorrScore

@AdvCorrCauseType = $OS_AdvCorrCauseType

@CauseType = @AdvCorrCauseType

 

@LocalObjRelate = $VAR_RelateLRO2LPO

@LocalObjRelate = int($VAR_RelateLRO2LSO) * 4 + int(@LocalObjRelate) 

@LocalObjRelate = int($VAR_RelateLSO2LPO) * 16 + int(@LocalObjRelate)  

@RemoteObjRelate = $VAR_RelateRRO2RPO

@RemoteObjRelate = int($VAR_RelateRRO2RSO) * 4 + int(@RemoteObjRelate)

@RemoteObjRelate = int($VAR_RelateRSO2RPO) * 16 + int(@RemoteObjRelate)

 

 

Regards,

Abhishek RVRK Sharma | Senior Analyst - Tools | Visibility Practice |
HCL Comnet Ltd. | F8/9 Sector 3 Noida | abhishekrs at hcl.in | 9958092330

 

"It's not that I'm so smart, it's just that I stay with problems longer.
~Albert Einstein"

 



DISCLAIMER:
-----------------------------------------------------------------------------------------------------------------------
The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. 
It shall not attach any liability on the originator or HCL or its affiliates. Any views or opinions presented in 
this email are solely those of the author and may not necessarily reflect the opinions of HCL or its affiliates. 
Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of 
this message without the prior written consent of the author of this e-mail is strictly prohibited. If you have 
received this email in error please delete it and notify the sender immediately. Before opening any mail and 
attachments please check them for viruses and defect.
-----------------------------------------------------------------------------------------------------------------------