This a Wily/CA Introscope EM extension that provides a custom alert action, for escalating alerts to a SMC system, like Tivoli or OpenView.
The Action dialog manages several parameters that will form a command line to execute. The Command Arguments field defines the arguments sent to the executable. This field allows key susbstitution based on all the other parameters. Here is an example intended for Tivoli.
-S ${server} -r ${severity} -m '${message}' hostname=${host} ${group} ${source}
The table below lists the parameters available for substitution into the command argument string.
| Name | Description |
| host | Host name of Agent |
| group | Process name of Agent |
| source | Name of Agent |
| severity | The target (SMC) severity |
| server | The host or IP of the SMC server |
| message | The alert message |
The supplied Perl script 'echo.pl' can be used for testing the action configuration. Copy the script into the EM /scripts/ directory. Ensure it is executable 'chmod +x echo.pl '. Verify and perhaps update the path to the Perl executable at the very first line of the script.
The snippet below shows output of using the action with the 'echo.pl' Perl script.
6/21/09 05:59:45 PM GMT+01:00 [VERBOSE] [Manager.SMCAlertAction] ENTER
6/21/09 05:59:45 PM GMT+01:00 [VERBOSE] [Manager.SMCAlertAction] Action Params: {executable=scripts/echo.pl, command=-S ${server} hostname=${host} -r ${severity} -m '${message}' ${group} ${source}, group=Tester, message=NULL, host=NULL, severity=Harmless, source=NULL, server=theSMC}
6/21/09 05:59:45 PM GMT+01:00 [VERBOSE] [Manager.SMCAlertAction] Alert: Alert[domain=SuperDomain, host=spooky, proces=Tester, name=Fibonacci, message=2009-06-21 17:59:45 GMT+01:00 Introscope Enterprise Manager (spooky:127.0.1.1) reported:
The Alert "compute - time" opened a danger alert with a target of 350:
SuperDomain|spooky|Tester|Fibonacci|Fibonacci|com.ribomation.fibonacci|Fibonacci|compute:Average Response Time (ms) = 360]
6/21/09 05:59:45 PM GMT+01:00 [INFO] [Manager.SMCAlertAction] Executing SMC AlertAction command: [scripts/echo.pl, -S, theSMC, hostname=spooky, -r, Harmless, -m, '2009-06-21 17:59:45 GMT+01:00 Introscope Enterprise Manager (spooky:127.0.1.1) reported: The Alert "compute - time" opened a danger alert with a target of 350: SuperDomain|spooky|Tester|Fibonacci|Fibonacci|com.ribomation.fibonacci|Fibonacci|compute:Average Response Time (ms) = 360', Tester, Fibonacci]
6/21/09 05:59:45 PM GMT+01:00 [INFO] [Manager.SMCAlertAction] Finished SMC AlertAction command. Output: ---ECHO Arguments---
1 [-S]
2 [theSMC]
3 [hostname=spooky]
4 [-r]
5 [Harmless]
6 [-m]
7 ['2009-06-21 17:59:45 GMT+01:00 Introscope Enterprise Manager (spooky:127.0.1.1) reported: The Alert "compute - time" opened a danger alert with a target of 350: SuperDomain|spooky|Tester|Fibonacci|Fibonacci|com.ribomation.fibonacci|Fibonacci|compute:Average Response Time (ms) = 360']
8 [Tester]
9 [Fibonacci]
---END---
6/21/09 05:59:45 PM GMT+01:00 [VERBOSE] [Manager.SMCAlertAction] EXIT
DekaBank in Frankfurt had in the past - via PS - maintained a patch of the EM for the shell command handler, which performed extensive alert message extractions and aggregations. When the new alert action API of ISC 7.1, became available they decided to skip the tedious patch and create an ordinary EM extension instead. This extension was tailored for OpenView and with tweaks for the Weblogic server.
In June 2009, the Swedish Forsakringskassan in Sundsvall, had a need for a similar action extension, but they are using Tivoli. A complete refactoring/rewrite was performed with emphasis of general usage.
Please, send comments/suggestions/bugs to
| Name | Jens Riboe (Ribomation) |
| jens.riboe@ribomation.com |