SFM test event does not work so far for me.

[Steve Post]

I numbered  the steps to my test as AAAA,BBBB,CCCC...yadda yadda yadda.

AAAA.  confirm SFM is running and not EMS
/opt/sfm/bin/sfmconfig -w –q

BBBB.  list doo-hickies called "subscriptions"
/opt/sfm/bin/evweb subscribe -L

CCCC.  make a new doo-hickie.
evweb subscribe -C -n sub_rx -e ge:6 -t "email to:billy@barty.com"
/opt/sfm/bin/evweb subscribe -L
/opt/sfm/bin/evweb subscribe -E -n sub_rx

DDDD.  run a test event
/opt/sfm/bin/sfmconfig -t -h  (lists what tests I can run).
/opt/sfm/bin/sfmconfig -t -i  (sends out a test event.  Well?   kind of sends it out.)

EEEE.  email does not show up
file /var/adm/syslog/syslog.log   has nothing now.
file /var/adm/syslog/mail.log   has nothing now.
root didn't get any email
billy@barty.com didn't either

I'll try to change the criteria maybe the error level is LESS than 6.
evweb subscribe -C -n sub_rx -e le:6 -t "email to:billy@barty.com"
No affect.

FFFF.  change the "from address" of the alert
cd /var/opt/sfm/conf
vi ./evweb.conf
change "evweb@hp.com" to post@mybox   post=userid   mybox=non-DNS hostname
/opt/sfm/bin/sfmconfig -c /var/opt/sfm/conf/evweb.conf
/opt/sfm/bin/sfmconfig -t -i
STILL no effect.

GGGG.  Another test.

Have a duplicate box.

Do not make any changes to it.

Just run that "sfmconfig -t -i" command and look in syslog.log.

STILL no effect.

So I have System Fault Management Software that will not alert me on a test?

No wait...I found the test event in
/var/opt/sfm/log/event.log.
It is event serverity 2, event #103, provider SEL02_IndicationProvider

But I do not see why it didn't write anything in syslog.log, or send an email to root, or send an email to billy@barty.com.  


There's probably something missing from my test.  My question is.....did I do something wrong in my test? 

rx2800-i2  hpux11.31
I can send email via cronjob or elm, or sendmail, or mailx, with no problem.  But that's just me.  That's not the test event. 

[Torsten. · Accepted solution]

Consider to get the

HP Insight Remote Support Standard
A.05.70 Managed Systems Configuration Guide

or

HP Insight Remote Support Advanced
A.05.70 Managed Systems Configuration Guide

this will tell you how to configure SFM and WBEM - note, there are a couple of dependencies.

[Steve Post]

I have a hard time giving you kudos or a solution solved here.  

You see, although your answer is correct, it will require weeks of study.

I was expecting something more like the word:    yes   or no.

Yes? I did the stuff correctly?  That means that something is messed up that will take me a long time to figure out.  So I might as well give up and do something easier.   Like make my own alert system.  This IS easier since I already made two of them in the past, and they still work fine. 

No?  I did something dumb.  It will be obvious for people with experience with this stuff.  Then I would make that change and try again.

This alert system seems to have too many wheels and cogs.  It reminds me of the old "SPACEBALLS" movie where the president gives up trying to get transported and decides to actually WALK the 10 feet.

[Torsten.]

Steve, the document has around 5 related pages where you can compare your patches and settings.

[Steve Post]

Ok.   I'll try it sometime this week.

[Joe Quijada]

You have a subscription of severity 6 and you can not use that for a test.  Create a new Test_Subscription of severity 1.

# evweb subscribe -C -n sub_rx -e le:1 -t "email to:billy@barty.com"

That should take care of it.

JoeQ

[Steve Post]

I have three separate rx boxes.  I set up "subscriptions" exactly the same on all 3.

# evweb subscribe -L

#evweb subscribe -C -n t_sfm -e le:2   -t "email to:billy@barty.com"
#evweb subscribe -C -n t_sfmlog -e le:2  -s syslog

#evweb subscribe -L

I ran a test. A memory test.

sfmconfig -t -m

I ran "evweb eventviewer -L" and found the event listed on all three.

However....

On one box the email came out fine. But there was no text in /var/adm/syslog/syslog.log.

On the other two, the email didn't show up.  And there was no text in /var/adm/syslog.log.

In the two that failed to say anything... file /var/opt/sfm/log/sfm.log, I see "ERROR 22497.. An unmapped severity found that may not match any events generated so skipping the WQL creation."

on the one with the email but no syslog.log entry....

"An error occured while getting the instance of HPKnown filter"