Scheduled Tasks & Automatic Event Handling help needed.

[s2dh]

Hi All,

What is the correct procedure for creating a task to detect specific hardware faults..?

We have created an Automatic Event Handling task to detect specific hardware fault alerts, selected the collection, selected the email and time options and saved this, this does not run and there is no way to run this..?

Looking at the Scheduled tasks we created a new task that is using the "Hardware Status Polling" tool which is running but is producing no events.? (we know there is a fault on one of our servers that this should be detecting)?

We have been playing with this for most of the day and are now confused as to what the correct way of setting up and new event/alert..?

Any help would be great to put us back on the right path...

[budykiller03]

[EDIT] Please provide Target machine System (esx, windows...) ; What you see in the Health Status of your target ? Is the failure you mentionned showing ?

Hardware status polling is used to fill the "Health Status" of your targets. This task is often pre-created and run every 5 minutes or so.

Every 5 minutes, it will query your targets for failure and basic monitoring.

But the Event thing is totally appart from that, and confusing people at first.

Automatic Event Handling, like its name, will create a "rule" that will be executed everytime when a criteria will be match.

1) You have to specify which criterias (Hours, Specific event types, etc.)

2) You have to tell what to do (log, send mail, make a cup of coffee and so on)

If an new event is created by any targets you specified, if there is a match with your Automatic Event Handling settings, it will fire the action you want.

You probably did all steps mentionned above. And you see that this task has "never been run" in HP SIM. So what the heck ? It's just that no SNMP traps or WBEM events have been created and thus will not fire your Automatic Event Handling task.

If you have events however, you need to check the criterias of the Automatic Handling. Maybe you have some "Error events", but you told HP SIM to manage only "Warning Events".

[shocko]

Ensure the monitored servers are sending traps to the CMS.

[s2dh]

Hi,

Servers are all Windows.

I have now created an Automatic Event Handling task -

Event collection: Important ProLiant Events

System type is Server 
Time Filter - All week.

But this does not run, the last run time is not updating..?..?

I have disabled all of my Scheduled Tasks, could this be the reason..?

We only want 2 alerts for now -

Server unreachable/rechable to email one group - We have this working.

Server hardware issues to email another group - this fails to work or run.

[shocko]

Teh task must be enabled to run. Paste it's XML config.

[s2dh]

Sorry, I am new to HP SIM, what folder will these be in.?

[shocko]

Run this command:

• mxtask -ld taskname

[s2dh]

Here it is, thanks...

C:\>mxtask -ld "Server Hardware Alerts"
Task Name       :Server Hardware Alerts
Tool Name       :Action on Events
Query Name      :AUTOEVTHNDLR_20
Owner           :****\****
Time Filter     :All Week
Run At Startup  :Disabled
Task Enable     :Enabled
Last Run        :08/15/12 - 15:50:01
Next Run        :Node/Event Driven
Last Modified   :08/15/12 - 17:16:20
Schedule        :Node/Event Driven (When new systems or events meet the list cri
teria)
Tool Parameters :
<?xml version="1.0"?>
<XeObject className="com.hp.mx.core.tools.actiononevents.ActionOnEventsTaskParam
eters" classVersion="2">
 <Property name="wizardMode">
  <Simple>1</Simple>
 </Property>
 <Property name="sendPage">
  <Simple>false</Simple>
 </Property>
 <Property name="pagerMode">
  <Simple>1</Simple>
 </Property>
 <Property name="pagerMessage">
  <Simple></Simple>
 </Property>
 <Property name="pagingUsers">
  <List size="0">
  </List>
 </Property>
 <Property name="sendMail">
  <Simple>true</Simple>
 </Property>
 <Property name="mailTo">
  <Simple>hpsimhardware@**********.com</Simple>
 </Property>
 <Property name="mailCC">
  <Simple> </Simple>
 </Property>
 <Property name="mailSubject">
  <Simple> </Simple>
 </Property>
 <Property name="mailFormat">
  <Simple>1</Simple>
 </Property>
 <Property name="mailEncoding">
  <Simple>ISO-8859-1</Simple>
 </Property>
 <Property name="launchApp">
  <Simple>false</Simple>
 </Property>
 <Property name="appLaunchTool">
  <Simple></Simple>
 </Property>
 <Property name="appLaunchTaskName">
  <Simple></Simple>
 </Property>
 <Property name="forwardTrap">
  <Simple>false</Simple>
 </Property>
 <Property name="trapRecepients">
  <List size="0">
  </List>
 </Property>
 <Property name="assignEvent">
  <Simple>false</Simple>
 </Property>
 <Property name="assignee">
  <Simple></Simple>
 </Property>
 <Property name="clearEvent">
  <Simple>false</Simple>
 </Property>
 <Property name="logEvent">
  <Simple>false</Simple>
 </Property>
 <Property name="forwardWbem">
  <Simple>false</Simple>
 </Property>
 <Property name="WbemURL">
  <Simple></Simple>
 </Property>
</XeObject>

Critical        :True

It all makes sense what you said earlier, We have a server with a failed disk, but it is not being reported. You can see this in the Server Health status,

[shocko]

HI, just re-reading through this thread. Have you verified that traps are being received form the server with the failed hard drive? Send a test trap form the control panel HP Management Agents applet and see if it arrives at the SIM server using a network monitor or otherwise. The test trap should show up in the events list against the server that sent it in SIM. Once that has been verified we can focus on getting the event handlers to work. The hardware status polling wont tell you if a disk is failed. It's basically asking the server, what is your over all status? It's up to the server to send SNMP traps when things fail and SIM interprets those traps (or wbem indications if using WBEM).

[s2dh]

Thanks for the replies..

I ran a test trap and this was received, but still no notification that the disk is in a failed state..?

Also one of our sites went down last night and this was not alerted either..?