Analyzing logs for SNMP Event Adapter issues
- Event Adapter service starting
- Identifying the cell to notify about the startup
- Sending the Adapter Started event to the cell
- Starting SNMP Adapter
- Reading in the mcsnmptrapd.map
- Sending the Starting SNMP Adapter event to the cell
- Initialization complete, starting to process traps
- Unable to connect to the port 162
- Event being sent to cell
- Messages indicating Adapter matching traps to the mapping file
- Adapter being stopped
The examples in this section illustrate how the behavior of the SNMP adapter is recorded in the log.
Event Adapter service starting
STARTING_POINT - (gmt: Tue May 1 14:26:15 2012) (local: Tue May 1 10:26:15 2012)
Identifying the cell to notify about the startup
20120501 14:26:15 MA::EngineMgr:567 Vrbse - MA::EngineMgr::CreateMsend
20120501 14:26:15 MA::EngineMgr:569 Vrbse - creating msend object for default
20120501 14:26:15 MA::EngineMgr:606 Vrbse - Destinations cell(s) for adapter 'default': 'pncell_mike'
20120501 14:26:15 MA::EngineMgr:569 Vrbse - creating msend object for default
20120501 14:26:15 MA::EngineMgr:606 Vrbse - Destinations cell(s) for adapter 'default': 'pncell_mike'
Sending the Adapter Started event to the cell
20120501 14:26:15 MA::EngineMgr:636 Vrbse - We need to create the msend object
20120501 14:26:15 MC::Poster:82 Vrbse - MC::Poster::new
20120501 14:26:15 MC::Poster:233 Vrbse - Starting msend: D:/BMCSOF~1/Impact/server/bin/msend.exe \-n pncell_mike \-j "D:/BMCSOF~1/Impact/server/log/adapters/perl/ pncell_mike " \-p MpServerIdleTimeout=0 -
20120501 14:26:15 MA::EngineMgr:799 Vrbse - Sending MC_ADAPTER_START event
20120501 14:26:15 MA::Engine:549 Vrbse - MA::Engine::Send
20120501 14:26:15 MA::Engine:587 Vrbse - MA::Engine::SetDefaultSlots
20120501 14:26:15 MA::Engine:508 Vrbse - MA::Engine::_Send
20120501 14:26:15 MC::Poster:290 Vrbse - MC::Poster::Send
20120501 14:26:15 MC::Poster:322 Vrbse - Sending to $VAR1 = \[
'mike'
\];
:
MC_ADAPTER_START;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1335882375;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_object = mcxa;
mc_object_class = "MA::EngineMgr";
mc_origin = mcxa;
mc_origin_class = "MA::EngineMgr";
mc_tool = mcxa;
mc_tool_class = "MA::EngineMgr";
msg = "BMC Impact Event Adapter started";
END
20120501 14:26:15 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
' pncell_mike '
\];
20120501 14:26:15 MC::Poster:82 Vrbse - MC::Poster::new
20120501 14:26:15 MC::Poster:233 Vrbse - Starting msend: D:/BMCSOF~1/Impact/server/bin/msend.exe \-n pncell_mike \-j "D:/BMCSOF~1/Impact/server/log/adapters/perl/ pncell_mike " \-p MpServerIdleTimeout=0 -
20120501 14:26:15 MA::EngineMgr:799 Vrbse - Sending MC_ADAPTER_START event
20120501 14:26:15 MA::Engine:549 Vrbse - MA::Engine::Send
20120501 14:26:15 MA::Engine:587 Vrbse - MA::Engine::SetDefaultSlots
20120501 14:26:15 MA::Engine:508 Vrbse - MA::Engine::_Send
20120501 14:26:15 MC::Poster:290 Vrbse - MC::Poster::Send
20120501 14:26:15 MC::Poster:322 Vrbse - Sending to $VAR1 = \[
'mike'
\];
:
MC_ADAPTER_START;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1335882375;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_object = mcxa;
mc_object_class = "MA::EngineMgr";
mc_origin = mcxa;
mc_origin_class = "MA::EngineMgr";
mc_tool = mcxa;
mc_tool_class = "MA::EngineMgr";
msg = "BMC Impact Event Adapter started";
END
20120501 14:26:15 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
' pncell_mike '
\];
Starting SNMP Adapter
20120501 14:26:15 MA::EngineMgr:315 Vrbse - StartInstance : Adapter 'Snmp'
20120501 14:26:15 MA::EngineMgr:567 Vrbse - MA::EngineMgr::CreateMsend
20120501 14:26:15 MA::EngineMgr:569 Vrbse - creating msend object for Snmp
20120501 14:26:15 MA::EngineMgr:606 Vrbse - Destinations cell(s) for adapter 'Snmp': 'pncell_mike'
20120501 14:26:15 MA::EngineMgr:567 Vrbse - MA::EngineMgr::CreateMsend
20120501 14:26:15 MA::EngineMgr:569 Vrbse - creating msend object for Snmp
20120501 14:26:15 MA::EngineMgr:606 Vrbse - Destinations cell(s) for adapter 'Snmp': 'pncell_mike'
Note if the same cell is used to receive events from the SNMP adapter and the Event Adapter service. You will also get the message
20120501 14:26:15 MA::EngineMgr:627 Vrbse - msend already exists for destination pncell_mike, so just increase the count
20120501 14:26:15 MA::EngineMgr:631 Vrbse - 2 adapters are using D:/BMCSOF~1/Impact/server/log/adapters/perl/pncell_mike now
Reading in the mcsnmptrapd.map
Starting
20120501 14:26:15 MA::EngineMgr:451 Vrbse - Creating map object for Snmp
20120501 14:26:15 MA::EngineMgr:462 Vrbse - >>>>++++\+ MA::ESnmpTrap - mcsnmptrapd.map
20120501 14:26:15 MA::EngineMgr:506 Vrbse - We need to create the map object
20120501 14:26:15 MA::Map:105 Vrbse - MA::Map::new
20120501 14:26:15 MA::Map:202 Vrbse - MA::Map::ParseMapFile
20120501 14:26:15 MA::Map:212 Vrbse - Opening map file: D:/BMCSOF~1/Impact/server/etc/mcsnmptrapd.map
Completed
20120501 14:26:15 MA::Map:262 Vrbse - Successfull parsing of the map file
20120501 14:26:15 MA::Map:280 Vrbse - Class structure:
SNMP_TRAP (2)
SNMP_GENERIC (3)
SNMP_COLD_START (4)
SNMP_WARM_START (5)
SNMP_LINK_DOWN (6)
SNMP_LINK_UP (7)
SNMP_AUTHENTICATION_FAILURE (8)
SNMP_EGP_NEIGHBOR_LOSS (9)
SNMP_ENTERPRISE (10)
20120501 14:26:15 MA::Map:288 Vrbse - Map file successfully compiled
20120501 14:26:15 MA::EngineMgr:451 Vrbse - Creating map object for Snmp
20120501 14:26:15 MA::EngineMgr:462 Vrbse - >>>>++++\+ MA::ESnmpTrap - mcsnmptrapd.map
20120501 14:26:15 MA::EngineMgr:506 Vrbse - We need to create the map object
20120501 14:26:15 MA::Map:105 Vrbse - MA::Map::new
20120501 14:26:15 MA::Map:202 Vrbse - MA::Map::ParseMapFile
20120501 14:26:15 MA::Map:212 Vrbse - Opening map file: D:/BMCSOF~1/Impact/server/etc/mcsnmptrapd.map
Completed
20120501 14:26:15 MA::Map:262 Vrbse - Successfull parsing of the map file
20120501 14:26:15 MA::Map:280 Vrbse - Class structure:
SNMP_TRAP (2)
SNMP_GENERIC (3)
SNMP_COLD_START (4)
SNMP_WARM_START (5)
SNMP_LINK_DOWN (6)
SNMP_LINK_UP (7)
SNMP_AUTHENTICATION_FAILURE (8)
SNMP_EGP_NEIGHBOR_LOSS (9)
SNMP_ENTERPRISE (10)
20120501 14:26:15 MA::Map:288 Vrbse - Map file successfully compiled
Sending the Starting SNMP Adapter event to the cell
20120501 14:26:16 MC::Poster:322 Vrbse - Sending to $VAR1 = \[
pncell_mike'
\];
:
MC_ADAPTER_START;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1335882376;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_object= Snmp;
mc_object_class= "MA::ESnmpTrap";
mc_origin = Snmp;
mc_origin_class = "MA::ESnmpTrap";
mc_parameter = STATUS;
mc_parameter_value = STARTED;
mc_tool = mcxa;
mc_tool_class = "MA::ESnmpTrap";
msg = "Adapter 'Snmp' (Engine: 'MA::ESnmpTrap') started by 'mcxa'";
END
20120501 14:26:18 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
'pncell_mike'
\];
pncell_mike'
\];
:
MC_ADAPTER_START;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1335882376;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_object= Snmp;
mc_object_class= "MA::ESnmpTrap";
mc_origin = Snmp;
mc_origin_class = "MA::ESnmpTrap";
mc_parameter = STATUS;
mc_parameter_value = STARTED;
mc_tool = mcxa;
mc_tool_class = "MA::ESnmpTrap";
msg = "Adapter 'Snmp' (Engine: 'MA::ESnmpTrap') started by 'mcxa'";
END
20120501 14:26:18 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
'pncell_mike'
\];
Initialization complete, starting to process traps
20120501 14:26:18 MA::EngineMgr:815 Norml - Initialization of engines successful\!
20120501 14:26:18 MA::EngineMgr:973 Norml - Entering MainLoop
20120501 14:26:18 MA::EngineMgr:973 Norml - Entering MainLoop
Unable to connect to the port 162
23:53:56 MC::Base:167 Major - Error at C:/PROGRA~1/BMCSOF~1/Impact/server/lib/perl/MA/ESnmpTrap.pm:473 (MA::Engine::Err): Couldn't be an UDP server on port 162.
This error is caused because the adapter cannot take port 162
This could be because the adapter is not run as a user with Admin/root privileges
Or that the port is being used by another process.
This error is caused because the adapter cannot take port 162
This could be because the adapter is not run as a user with Admin/root privileges
Or that the port is being used by another process.
Event being sent to cell
20120119 18:17:45 MA::Map:919 Norml - Event matches class: SNMP_ENTERPRISE
20120119 18:17:45 MA::Map:920 Vrbse - Event in BAROC format (without default slots):
SNMP_ENTERPRISE;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_tool = vmwVC;
mc_tool_suggestion = 1.3.6.1.4.1.6876.4.3;
snmp_community = public;
snmp_contextEngineID = "<null>";
snmp_contextName = "<null>";
snmp_enterprise = 1.3.6.1.4.1.6876.4.3;
snmp_enterprise_str = vmwVC;
snmp_error_index = \-1;
snmp_error_status = \-1;
snmp_oids = \[1.3.6.1.4.1.6876.4.3.308.0, 1.3.6.1.4.1.6876.4.3.304.0, 1.3.6.1.4.1.6876.4.3.305.0, 1.3.6.1.4.1.6876.4.3.306.0, 1.3.6.1.4.1.6876.4.3.307.0\];
snmp_oidst = \[vmwVpxdTargetObjType, vmwVC, vmwVC, vmwVC, vmwVC\];
snmp_request_id = \-1;
snmp_securityEngineID = "<null>";
snmp_securityLevel = SNMP_SEC_MODEL_SNMPv1;
snmp_securityModel = SNMP_SEC_LEVEL_NOAUTH;
snmp_securityName = "<null>";
snmp_source_addr = 172.10.10.10;
snmp_specific = 203;
snmp_time_ticks = 15353476;
snmp_trap_type = 6;
snmp_trap_type_str = enterpriseSpecific;
snmp_vals = \[2, Green, Red, "Host connection and power state - State = Not responding AND State = Unknown", 172.10.10.10\];
snmp_version = 0;
END
20120119 18:17:45 MA::Engine:549 Vrbse - MA::Engine::Send
20120119 18:17:45 MA::Engine:587 Vrbse - MA::Engine::SetDefaultSlots
20120119 18:17:45 MA::Engine:508 Vrbse - MA::Engine::_Send
20120119 18:17:45 MC::Poster:290 Vrbse - MC::Poster::Send
20120119 18:17:45 MC::Poster:322 Vrbse - Sending to $VAR1 = \[
'pncell_mike'
\];
:
SNMP_ENTERPRISE;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1326997065;
mc_host = 172.10.10.10;
mc_host_address = 172.10.10.10;
mc_object = SnmpTrap;
mc_object_class = "MA::ESnmpTrapV3";
mc_origin = SnmpTrap;
mc_origin_class = "MA::ESnmpTrapV3";
mc_tool = vmwVC;
mc_tool_class = SnmpTrap;
mc_tool_suggestion = 1.3.6.1.4.1.6876.4.3;
snmp_community = public;
snmp_contextEngineID = "<null>";
snmp_contextName = "<null>";
snmp_enterprise = 1.3.6.1.4.1.6876.4.3;
snmp_enterprise_str = vmwVC;
snmp_error_index = \-1;
snmp_error_status = \-1;
snmp_oids = \[1.3.6.1.4.1.6876.4.3.308.0, 1.3.6.1.4.1.6876.4.3.304.0, 1.3.6.1.4.1.6876.4.3.305.0, 1.3.6.1.4.1.6876.4.3.306.0, 1.3.6.1.4.1.6876.4.3.307.0\];
snmp_oidst = \[vmwVpxdTargetObjType, vmwVC, vmwVC, vmwVC, vmwVC\];
snmp_request_id= \-1;
snmp_securityEngineID = "<null>";
snmp_securityLevel = SNMP_SEC_MODEL_SNMPv1;
snmp_securityModel = SNMP_SEC_LEVEL_NOAUTH;
snmp_securityName = "<null>";
snmp_source_addr = 172.10.10.10;
snmp_specific = 203;
snmp_time_ticks = 15353476;
snmp_trap_type = 6;
snmp_trap_type_str = enterpriseSpecific;
snmp_vals = \[2, Green, Red, "Host connection and power state - State = Not responding AND State = Unknown", 172.10.10.10\];
snmp_version= 0;
END
20120119 18:17:45 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
'pncell_mike'
\];
20120119 18:17:45 MA::Map:920 Vrbse - Event in BAROC format (without default slots):
SNMP_ENTERPRISE;
mc_host = 8PFNZK1.adprod.bmc.com;
mc_host_address = 172.10.10.10;
mc_tool = vmwVC;
mc_tool_suggestion = 1.3.6.1.4.1.6876.4.3;
snmp_community = public;
snmp_contextEngineID = "<null>";
snmp_contextName = "<null>";
snmp_enterprise = 1.3.6.1.4.1.6876.4.3;
snmp_enterprise_str = vmwVC;
snmp_error_index = \-1;
snmp_error_status = \-1;
snmp_oids = \[1.3.6.1.4.1.6876.4.3.308.0, 1.3.6.1.4.1.6876.4.3.304.0, 1.3.6.1.4.1.6876.4.3.305.0, 1.3.6.1.4.1.6876.4.3.306.0, 1.3.6.1.4.1.6876.4.3.307.0\];
snmp_oidst = \[vmwVpxdTargetObjType, vmwVC, vmwVC, vmwVC, vmwVC\];
snmp_request_id = \-1;
snmp_securityEngineID = "<null>";
snmp_securityLevel = SNMP_SEC_MODEL_SNMPv1;
snmp_securityModel = SNMP_SEC_LEVEL_NOAUTH;
snmp_securityName = "<null>";
snmp_source_addr = 172.10.10.10;
snmp_specific = 203;
snmp_time_ticks = 15353476;
snmp_trap_type = 6;
snmp_trap_type_str = enterpriseSpecific;
snmp_vals = \[2, Green, Red, "Host connection and power state - State = Not responding AND State = Unknown", 172.10.10.10\];
snmp_version = 0;
END
20120119 18:17:45 MA::Engine:549 Vrbse - MA::Engine::Send
20120119 18:17:45 MA::Engine:587 Vrbse - MA::Engine::SetDefaultSlots
20120119 18:17:45 MA::Engine:508 Vrbse - MA::Engine::_Send
20120119 18:17:45 MC::Poster:290 Vrbse - MC::Poster::Send
20120119 18:17:45 MC::Poster:322 Vrbse - Sending to $VAR1 = \[
'pncell_mike'
\];
:
SNMP_ENTERPRISE;
adapter_host = 8PFNZK1.adprod.bmc.com;
mc_arrival_time = 1326997065;
mc_host = 172.10.10.10;
mc_host_address = 172.10.10.10;
mc_object = SnmpTrap;
mc_object_class = "MA::ESnmpTrapV3";
mc_origin = SnmpTrap;
mc_origin_class = "MA::ESnmpTrapV3";
mc_tool = vmwVC;
mc_tool_class = SnmpTrap;
mc_tool_suggestion = 1.3.6.1.4.1.6876.4.3;
snmp_community = public;
snmp_contextEngineID = "<null>";
snmp_contextName = "<null>";
snmp_enterprise = 1.3.6.1.4.1.6876.4.3;
snmp_enterprise_str = vmwVC;
snmp_error_index = \-1;
snmp_error_status = \-1;
snmp_oids = \[1.3.6.1.4.1.6876.4.3.308.0, 1.3.6.1.4.1.6876.4.3.304.0, 1.3.6.1.4.1.6876.4.3.305.0, 1.3.6.1.4.1.6876.4.3.306.0, 1.3.6.1.4.1.6876.4.3.307.0\];
snmp_oidst = \[vmwVpxdTargetObjType, vmwVC, vmwVC, vmwVC, vmwVC\];
snmp_request_id= \-1;
snmp_securityEngineID = "<null>";
snmp_securityLevel = SNMP_SEC_MODEL_SNMPv1;
snmp_securityModel = SNMP_SEC_LEVEL_NOAUTH;
snmp_securityName = "<null>";
snmp_source_addr = 172.10.10.10;
snmp_specific = 203;
snmp_time_ticks = 15353476;
snmp_trap_type = 6;
snmp_trap_type_str = enterpriseSpecific;
snmp_vals = \[2, Green, Red, "Host connection and power state - State = Not responding AND State = Unknown", 172.10.10.10\];
snmp_version= 0;
END
20120119 18:17:45 MC::Poster:351 Vrbse - ...Event sent to $VAR1 = \[
'pncell_mike'
\];
Messages indicating Adapter matching traps to the mapping file
20120213 13:57:28 MA::Map:1327 Vrbse - MA::Map::MapOUT
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 1
20120213 13:57:28 MA::Map:1327 Vrbse - MA::Map::MapOUT
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:1226 Minor - Map->EvalCondition. Internal Error. Eval Failed. rc : \-1
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 0
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 1
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 1
20120213 13:57:28 MA::Map:1327 Vrbse - MA::Map::MapOUT
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:1226 Minor - Map->EvalCondition. Internal Error. Eval Failed. rc : \-1
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 0
20120213 13:57:28 MA::Map:950 Vrbse - MA::Map::MatchAndCreateEvent
20120213 13:57:28 MA::Map:972 Vrbse - MatchAndCreateEvent : Received value form Eval Function :\- r = 1
Adapter being stopped
20120405 20:11:25 MA::EngineMgr:1008 Major - Stopping adapter instance \[Snmp\]
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*