[INUG-Users] Advanced Correlation

[John Blake]

I don't see anything wrong.
 Its using $VAR_RelateLRO2LPO to set a field.
 The other lines are just adding to it.
 So where is $VAR_RelateLRO2LPO being set at in the rules?
 


-----Original Message-----
From: users-bounces at netcoolusers.org
[mailto:users-bounces at netcoolusers.org] On Behalf Of Abhishek Rvrk
Sharma
Sent: Wednesday, January 02, 2008 9:09 AM
To: users at netcoolusers.org
Subject: [INUG-Users] Advanced Correlation


Hi folks,

 

I was having problems while looking at the NCKL correlation rule files -
There are a lot of probe variables I saw in the files ( in the
AdvCorr36.include.rules file etc. ), for which I cannot understand what
values are being taken - from what I understand, the only values the
syslog probe exposes to the rules file are the token values - Are there
certain probe variable values that the syslog probe sends along with the
token values?

 

I am doing some work on understanding the correlation in the NCKL - help
would be appreciated :-)

 

########################################################################
#######

#

#    Licensed Materials - Property of IBM

#

#    (C) Copyright IBM Corp. 2006

#    All Rights Reserved

#

#    AdvCorr36.include.compat.rules 1.1

#    2005/03/01 Robert Cowart

#

########################################################################
#######

########################################################################
#######

#

# 1.1 - Modified to support AdvCorrCauseType.

#

#     - Added basic debug logging.

#

# 1.0 - Initial Release.

#

########################################################################
#######

##########################################################

#>> This was included in the Syslog probe

#>> NCKL rulefile - where are these values coming from?

#########################################################

 

log(DEBUG, "<<<<< Entering... AdvCorr36.include.compat.rules >>>>>")

 

@CorrScore = $OS_CorrScore

@AdvCorrCauseType = $OS_AdvCorrCauseType

@CauseType = @AdvCorrCauseType

 

@LocalObjRelate = $VAR_RelateLRO2LPO

@LocalObjRelate = int($VAR_RelateLRO2LSO) * 4 + int(@LocalObjRelate) 

@LocalObjRelate = int($VAR_RelateLSO2LPO) * 16 + int(@LocalObjRelate)  

@RemoteObjRelate = $VAR_RelateRRO2RPO

@RemoteObjRelate = int($VAR_RelateRRO2RSO) * 4 + int(@RemoteObjRelate)

@RemoteObjRelate = int($VAR_RelateRSO2RPO) * 16 + int(@RemoteObjRelate)

 

 

Regards,

Abhishek RVRK Sharma | Senior Analyst - Tools | Visibility Practice |
HCL Comnet Ltd. | F8/9 Sector 3 Noida | abhishekrs at hcl.in | 9958092330

 

"It's not that I'm so smart, it's just that I stay with problems longer.
~Albert Einstein"

 



DISCLAIMER:
------------------------------------------------------------------------
-----------------------------------------------
The contents of this e-mail and any attachment(s) are confidential and
intended for the named recipient(s) only. 
It shall not attach any liability on the originator or HCL or its
affiliates. Any views or opinions presented in 
this email are solely those of the author and may not necessarily
reflect the opinions of HCL or its affiliates. 
Any form of reproduction, dissemination, copying, disclosure,
modification, distribution and / or publication of 
this message without the prior written consent of the author of this
e-mail is strictly prohibited. If you have 
received this email in error please delete it and notify the sender
immediately. Before opening any mail and 
attachments please check them for viruses and defect.
------------------------------------------------------------------------
-----------------------------------------------
_______________________________________________
Sent by the netcoolusers.org "users" mailing list
Post: users at netcoolusers.org
Unsubscribe: users-unsubscribe at netcoolusers.org
Search: http://lists.netcoolusers.org/archives/users/