SIM does not appear to detect blue screens (ASR)

[Kevin Kelling]

We still have an old version of CIM32 running in addition to SIM 4.1

The CIM32 console will have a node turn red when an unacknowledged blue screen/ASR event has occurred.

This is not happening in SIM. There is no alert nor notification within SIM that a server had previously blue screened. SIM will report if a server is unavailable at that moment, but there is nothing to tell you that serverX blue screened at 3AM for example.

How to we get SIM to recognize such events. When a server reboots, don't the agents send a trap at that time, saying that "hey, I'm up now, but I crashed and ASRed a few minutes ago".


How do we get SIM to have this functionality as CIM32 does?

Thanks

[Joseph Madden]

Kevin,

I believe you are right that it does not throw a 'blue screen' trap - I do get 'Server is operational again after ASR shutdown. (1.3.6.1.4.1.232.0.6011)' messages after it recycles - and we use OVO integrated with IM - so we have configured this to be a pageable event.

I have never found a 'pre-failure' message to correlate with this.

HTH

Joe

[Rob Buxton]

How do you have ASR configured, if it does a shutdown you should pick that up.

I don't know if the actioning of an ASR generates an SNMP Trap. You could check that you have the Trap send configured correctly by using the HP Management Agents GUI to generate a test trap which IM should see.

I've found that the default polling time of 5 minutes is far too long to pick up Server reboots. I set up a Ping only Polling task to run every minute, and removed Ping from the list of protocols in the default task.

[Kevin Kelling]

I don't know how CIM32 does it but it works.

SIM 4.1 apparently is not getting the trap that is sent on upon bootup immediately following an ASR and is not inspecting the integrated management log, where the ASR event can be found.

Not sure what method CIM32 uses, but it works just fine and SIM does not.

[David Claypool]

Is it possible that you have not directed the agents to send a trap to the location of the HP SIM server?

[Kevin Kelling]

Not possible. traps are most definately being recived. Just not these (ASR)

[David Claypool]

Okay, so let's think about that. HP SIM distinguishes between traps it has knowledge of (through a registered MIB) and ones that it doesn't. If you set the option to accept unregistered traps, it will be put in the event system if the SNMP packet is received at the station. Try that and see if you get a raw event. If it isn't being received at all, then there's something in the infrastructure that is suppressing or blocking it before it gets to the HP SIM system.

[Kevin Kelling]

The only error I see in the events tab in SIM is "POST Errors Occured (Version 3)" -- which is immediately preceeded by "Link Up" and "Cold Start" events.

The POST Errors will turn the node "yellow" but was hoping that it would turn red in SIM, and more clearly notifying us that an ASR has occured.

Does it appear that there ais a trap/event we should be getting that we are not? The HP Agents version is 7.1.

Thanks!