LMS 2.6 - E-Mail Event Notification

Unanswered Question
Jun 13th, 2007
User Badges:

I have LMS 2.6 installed and have successfully added a new Cisco 3650 Switch. I've verified the Switch is added correctly both in RME and DFM.


I have configured an Event Set to notify me of "unresponsive" Events and set the Notification Group to receive Events only (No Alerts). The Events settings are set for Critical and Informational (with Active and Cleared checked).


My intent is to receive an e-mail notification whenever the Switch loses overall connectivity to the network.


When I reload the Switch, I receive 3 e-mail notifications.


The 1st E-mail shows:


EVENT ID = 0000124

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:26:27 EDT

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.16.254.106;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;



The 2nd E-Mail shows:


EVENT ID = 0000127

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:28:13 EDT

STATUS = Cleared

SEVERITY = Informational

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=172.20.254.100;Type=SWITCH;Description=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;Vendor=CISCO;SystemObjectID=.1.3.6.1.4.1.9.1.563;ReadCommunity=XXXXX;DiscoveredFirstAt=30-May-2007 2:27:40 PM;DisplayClassName=Switch;IsManaged=true;SNMPAddress=172.20.254.100;DiscoveredLastAt=12-Jun-2007 4:05:29 PM;



The 3rd E-Mail shows:


EVENT ID = 0000126

ALERT ID = 00000S8

TIME = Wed 13-Jun-2007 10:28:13 EDT

STATUS = Active

SEVERITY = Critical

MANAGED OBJECT = 172.20.254.100

MANAGED OBJECT TYPE = Switches and Hubs

EVENT DESCRIPTION = ** DEVICE DOWN **::Component=SNMPAgent-172.16.254.106;sysName=SwCMH10W06;ReadCommunity=XXXXX;AgentAddress=172.20.254.100;AgentAddressList=172.20.254.100;SNMPVersion=V2C;sysDescr=Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEB4, RELEASE SOFTWARE (fc1)\X0D\X0ACopyright (c) 1986-2005 by Cisco Systems, Inc.\X0D\X0ACompiled Tue 30-Aug-05 14:19 by yenanh;PortNumber=161;SNMPStatus=TIMEDOUT;



NOTE: The "XXXXX" shown above was changed by me for this posting.


Under DFM>Device Management>Device Details, I have the "Interface" for the Management VLAN set to "True" and all "Port" settings set to "False"


I have the Polling Thresholds<Polling Parameters<Reachability setting set for 120 seconds.


Ideally, I'll receive an E-mail when the Switch loses network connectivity and another when connectivity is restored.


I'm not sure why I'm getting the 3rd E-Mail. I have the

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Wed, 06/13/2007 - 07:56
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

The third is an SNMP reachability problem. Given its time, it's probably a race with the device coming online (port negotiations, spanning-tree, other CPU activities). You might try increasing the DFM SNMP timeout and retries to see if this problem goes away.

Actions

This Discussion