Best Practices for ECC monitoring

Allen what we did with using BMC Patrol is use the ECC provided Gateway Agent to forward the alerts to the Event Viewer and have BMC Patrol 'parse' the Event viewer and key on certain alerts, for instance using "LI_AppStateCheckV3"

We use NetIQ as a monitoring tool. Does ECC integrate with NetIQ?

I don't have a copy handy, but if you check the ControlCenter Support Matrix document it will detail which frameworks CC will directly integrate with.

If you are not on the list you can still forward SNMP traps to your framework... you just have to do more work to interpret them at that end.

Thanks Allen. I looked in the document and looks like NetIQ is not supported.

However, we installed integration gateway on our ecc server and set "NT_EventLog_Key = EMC_Alarms" in cng.ini file.

But, it is sending only status messages to the windows event viewer and alerts like disk failures, srdf alerts etc...are not sent to event viewer.

how can we configure the control center to send the alerts to the windows event viewer ?

Thanks in advance,

Julia P.

Sorry for the slow response Julia. I've been swamped since before EMC World and still digging my way out since. I haven't had as much time to devote to the Support Forums and usual.

I was kind of hoping we would have someone from Ionix Support able to clarify, but my understanding was that you would only ever get "generic" type alerts put in the event log, not specific agent alerts. By "generic" I mean those alerts related to the functioning of ControlCenter itself. I have not used this functionality specifically as we don't "mine" the event log for things. We either leave them in the console or forward them through SNMP, e-mail, paging, etc.

OK, I stand corrected (AGAIN, and we still aren't halfway through the year!). I've never looked at the parts of the documentation specific to integrating with MOM and it appears that this is a requirement there.

So, I guess the first question would be why you need the alerts put in the event log for NetIQ. I'm not familiar with that framework either. Does it farm the event log for alerts instead of accepting SNMP traps?

The other question would be... Do you have the other events you want picked up configured with a management policy to send to SNMP? I'm still looking through docs, but it looks to me like this setting will write to the event log items that have been forwarded to the Integration gateway. The way to get it forwarded to the Integration Gateway seems to be to set it to send to SNMP in the management policy (even if you don't really want it to send an SNMP trap). Trying to confirm, but that's what it looks like so far.

Welcome back Allen and thanks for your responses...we successfully configured ecc with netiq and it is working like magic

Yes we changed the management policy to send to SNMP, which then writes to the integration gateway.

Basically,  NetIQ picks up the errors and warnings from EMC_Alarm source of application event and sends email and shows in the framework console.

This is working pretty good so far.

Regards,

Julia Penubothula.

Glad to hear it is working for you now Julia :-)