Device Alert from Cisco LMS

[richardfinnie]

Hi All,

I am currently getting buried in a flurry of alerts from Cisco LMS. However when I check on the device in fault manager or with Device Diagnostic Tools, I do not see any issues. Anyone have any ideas as to why these alerts are being generated? ( I have removed our specific info with xxxx)

Additionally, I don't want to seem like I am bashing the LMS product, but could these alerts be made any more cryptic?

ALERT ID                = 00001LI

TIME                    = Wed 24-Mar-2010 01:21:49 GMT-06:00

STATUS                  = Active

SEVERITY                = Critical

MANAGED OBJECT          = xxxx

MANAGED OBJECT TYPE     = Switches and Hubs

EVENT DESCRIPTION       = xxxx: Cisco Configuration Management Trap:InformAlarm; xxxx [xxxx]:Unresponsive;

ALERT ID                = 00001LI

TIME                    = Wed 24-Mar-2010 06:54:37 GMT-06:00

STATUS                  = Active

SEVERITY                = Critical

MANAGED OBJECT          = xxxx

MANAGED OBJECT TYPE     = Switches and Hubs

EVENT DESCRIPTION       = xxxx: STP Topology Change:MinorAlarm; xxxx [xxxx]:Unresponsive;

ALERT ID                = 00001LI

TIME                    = Wed 24-Mar-2010 13:13:16 GMT-06:00

STATUS                  = Active

SEVERITY                = Critical

MANAGED OBJECT          = xxxx

MANAGED OBJECT TYPE     = Switches and Hubs

EVENT DESCRIPTION       = xxxx: vlanTrunkPortDynamicStatusChange Trap:InformAlarm; xxxx [xxxx]:Unresponsive;

ALERT ID                = 00001LI

TIME                    = Wed 24-Mar-2010 13:13:52 GMT-06:00

STATUS                  = Active

SEVERITY                = Critical

MANAGED OBJECT          = xxxx

MANAGED OBJECT TYPE     = Switches and Hubs

EVENT DESCRIPTION       = xxxx: STP Topology Change:MinorAlarm; ess016184.casino.sk.ca: vlanTrunkPortDynamicStatusChange Trap:InformAlarm; xxxx[xxxx]:Unresponsive;

ALERT ID                = 00001LI

TIME                    = Wed 24-Mar-2010 14:05:49 GMT-06:00

STATUS                  = Active

SEVERITY                = Critical

MANAGED OBJECT          = xxxx

MANAGED OBJECT TYPE     = Switches and Hubs

EVENT DESCRIPTION       = xxxx: vlanTrunkPortDynamicStatusChange Trap:InformAlarm; xxxx: STP Topology Change:MinorAlarm; xxxx [xxxx]:Unresponsive;

Thanks,

Rick

[Joe Clarke]

The alerts are quite generic.  The individual EVENT details will contain many more details.  Initially, it looks like DFM is showing you trap information relating to config  and STP changes.  If you have determined that these are not important, then you can clear the events (or mark them as acknowledged).  If you're receiving these as notifications (e.g. email notifications), you might consider creating event sets to filter the events to just the ones in which you are interested, then unchecking the boxes for alerts in your Notification Group.

[richardfinnie]

To be honest, I can't tell if they are important. The STP toplogy and configuration should not be changing on this device this regularily, and when I check the device, there is no indication of any problems. These are email notifications, and I would hate to filter out possible "real" alerts.

[Joe Clarke]

It may be that ports which do not have portfast enabled are going up and down, and causing the STP changes.  What messages do you see in show log on these devices?