Fixes are available
APAR status
Closed as program error.
Error description
v3.9 - FP1, FP2 and FP3 Syslog interface alarms were not being matched to interfaces in the topology. ExtractIfString.stch assumes that in the ifDescr value in the LocalPriObj or LocalRootObj were prefixed with a "ifEntry." string as is the convention for the ifIndex in interface traps. If a customer syslog rules just populate these fields with an unprefixed ifDescr value - so no syslog interface alarms would be successful in topology lookup and were instead being associated with the chassis (as if the interface wasn't in the topology). Ideally the stitcher should do following: (a) Try to extract <string> from 'ifEntry.string' as we currently do. Do a look-up on 'string' if that succeeds (b) If the string didn't have the format ifEntry.string, (ie the regex extraction failed), try to lookup the whole string
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * All ITNM 3.9 & 4.1 Users * **************************************************************** * PROBLEM DESCRIPTION: * * The gateway expects the LocalPriObj or LocalRootObj fields * * of an interface event to identify the interface with a value * * of the format 'ifEntry.<data>', where data can be values * * such as ifIndex or ifName. This ensures that the value used * * is really about an interface, as opposed to being, say, a * * card number.Some syslog events are generated which have the * * ifName as a plain string, without the 'ifEntry.' prefix. The * * problem is that these are not currently matched to the * * interface by the gateway. * **************************************************************** * RECOMMENDATION: * * | fix pack | 3.9.0-ITNMIP-FP0004 * * | fix pack | 4.1.0-ITNMIP-FP0001 * ****************************************************************
Problem conclusion
If the gateway does not find the 'ifEntry.' prefix in the LocalPriObj or LocalRootObj fields, it now falls back to perform a lookup of the whole text field against the ifName, ifAlias or ifDescr.
Temporary fix
Comments
APAR Information
APAR number
IV47678
Reported component name
NC/PRECISIONIP
Reported component ID
5724O52RC
Reported release
390
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-08-29
Closed date
2013-09-30
Last modified date
2013-09-30
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
NC/PRECISIONIP
Fixed component ID
5724O52RC
Applicable component levels
R390 PSN
UP
R390 PSY
UP
R410 PSN
UP
R410 PSY
UP
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCP984","label":"Discovery and RCA"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"390","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
30 September 2013