Auto Case Creation about PowerConnect M8024-k

Sunghwan,

We may need more information on some of your questions but I’ll provide initial details here in case others have the same question. Then we can take this offline if you have additional questions.

Can I get event lists about Auto Case Creation?

I believe all PowerConnect alerts will have an event source of “.1.3.6.1.4.1.674.10895”, you can go into the policy file located under C:\Program Files (x86)\Dell\Dell Integrated Support\bin\conf

There are about 55 policies that could match this event source.

If you search for this event source type, you will notice two important fields, AutoCase and AlertThreshold. Cases will only be created if AutoCase=Yes. The AlertThreshold tells you how many alerts in what timeframe it would take to create the alert. For example, FirstMatch(), the alert will create a case on the first alert, while a threshold of Occurs(3,00-01:00:00) means it would take 3 alerts in one hour to create an alert. If two alerts were sent and an hour passes this value will reset back to 0. Here are a couple of examples from the policy file.

OME

                .1.3.6.1.4.1.674.10895

                900

                Major

Trap indicating the power supply state. The dellTrapSource should identify the exact power supply. The dellTrapInfo may provide additional info regarding the power state.

                Yes

                FirstMatch()

                3

                FA

 

                OME

                .1.3.6.1.4.1.674.10895

                570

                Major

Link failure detected, no backup available. The dellTrapSource should indicate the fail link.

                Yes

                Occurs(3,00-01:00:00)

                3

                FA

For the next two questions we would need to know the TRAP/EVENTID combination from OME or you could grab this information from the SupportAssist logs while your testing to see what the threshold is. In the logs you can search for the service tag you are testing and grab this info. Logs are located under C:\Program Files (x86)\Dell\Dell Integrated Support\logs

An alert will look something like this:

 2014-07-29 00:01:05,625: T0xPHOMEScheduler_Worker-4 OMEQueryJob INFO Message=[Preparing alert:

                ID: -2147477670

                Service Tag: ABCDEFG

                IP: 1.1.1.1

                Model:

                DeviceName: ADEVICENAME

                DeviceType: PowerConnect

                EventSource: >.1.3.6.1.4.1.674.10895

                Diagnostics: True

                EventId:

                TrapId: 830

Message: This warning is generated when a port removed from a trunk. The dellTrapSource should indicate the trunk from which the port is removed. The dellTrapInfo should indicate the port being removed

                OS:

                Severity: 8

                Timestamp: 2014-07-29T00:01:05GMT-04:00]

When port fault event occured, Auto Case Creation should occur?

Again, I would need to know the TRAP/EVENT combo to know when and if a case would get created.

Here is an example of a port removed but there is no Autocase so a case would not get created, it’s only an informational alert.

 

                OME

                .1.3.6.1.4.1.674.10895

                830

                Warning

This warning is generated when a port removed from a trunk. The dellTrapSource should indicate the trunk from which the port is removed. The dellTrapInfo should indicate the port being removed.

                FA

When port unplug event occured, Auto Case Creation should occur?

Short answer is yes but again, we need the TRAP/EVENT Details, here is an example of a PS State.

                OME

                .1.3.6.1.4.1.674.10895

                900

                Major

Trap indicating the power supply state. The dellTrapSource should identify the exact power supply. The dellTrapInfo may provide additional info regarding the power state.

                Yes

                FirstMatch()

                3

                FA

 

I hope this helps and let me know if you would like me to email you?

Joe