run script on recovery of some alarm

[febelus]

hi, i've create a syslog template that create an alarm when i port go in err-disabled for portsecurity sticky. i've create a script to deploy on configuration center to unblock the port i i can pass the port umber and switch name to variable. Now i'd like to create a rule that execute the specific script to allarmed port (for cisco blocked port i want to run script on recovery) is possible?

[network_king]

Hello,

Please check below links which could be of help.

https://support.hpe.com/hpsc/doc/public/display?docId=mmr_kc-0131226
https://community.hpe.com/t5/IMC/How-to-create-a-CLI-script-and-general-questions/td-p/6798650#.W_zd3-gzaM8
https://community.hpe.com/t5/IMC/CLI-Script-with-dynamic-variables/td-p/6905618#.W_zdy-gzaM8

[febelus]

no one of this can help me.... I've created a cli script to recovery portsecurity disabled port..... the script work. now i want to execute this script when recover a type of alarm...

[racowi]

Have you tried using 'Intelligent Policy Center'? There is not much documentation on this subject, but sometimes I have tried to do tests, I have had 50% success. I would like the HPE team to improve the functions of this utility and explain better how to use more variables or parameters in our favor.

[febelus]

policy center can trig only snmp event ....i have to run script from an alarm generated from syslog template event..... there is a solution?

[racowi]

Hi,

Let say that your Syslog to Alarm name is "recover err-disabled". Then you  can use it on Policy Center.
Add an event and select Alarms: "Trap upgraded from syslog" <-- that is the actual name.

Then on the "Alarm Variable Matching Rules" section add the following:

1. Alarm Variable Name: "Rule Name"

2. Regular Expression: "recover err-disabled".

That is the way to trigger syslog to alarm events. 

[febelus]

you are my hero!!!

now i can 'trigger' the port blocked alarm to event of intelligent policy center .... but where can i found some documentation to create an action that run my cli script to the alarm source device on the blocked port (variable $port on my syslog to alarm)??

[febelus]

i want to run script only when recover error... now i'. using "Trap upgraded from syslog" and is not good ....i see that there is "Recover trap upgraded from syslog" but if i set this event configuration with the same rule name not wont to work....

[racowi]

Sorry I don't have the answer for how to run the script using the variables from a specific alarm.

Like I said before, Intelligent policy center have a lack of documentation and in my opinion is still on beta. 

One question: Why don't you create the auto recovery on the Cisco itself ex: "errdisable recovery interval xx"?