[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference azur::mcc

Title:DECmcc user notes file. Does not replace IPMT.
Notice:Use IPMT for problems. Newsletter location in note 6187
Moderator:TAEC::BEROUD
Created:Mon Aug 21 1989
Last Modified:Wed Jun 04 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6497
Total number of notes:27359

1365.0. "Audit trail capabilities ?" by CLARID::PATEL (We'll get it right on the night) Wed Aug 21 1991 08:26

    Is it possible in MCC to record the occurrence of events and recording
    of when alarms get triggered etc.

    The goal is to be able to keep a record of all external "events"
    (DECnet IP Trap etc) which came in, and those which resulted in an
    alarm triggering.  Also, to record all occurrences of threshold being
    exceeded and resulting alarms being generated (ie alerts , alarms),
    these off course need to be time stamped etc etc....

    The banking institution I am involved with "may" well ask us to provide
    audit trails etc
    
    
    Amrit


T.RTitleUserPersonal
Name
DateLines
1365.1BSYBEE::EGOLFJohn C. Egolf LKG2-2/T02 x226-7874Wed Aug 21 1991 08:549
	re .-1

	For alarms  that  get  triggered,  its  easy.   We supply a dcl
	command file that  writes the information (including timestamp)
	to a log file of your choice.

	For events that come  in  and  don't  trigger  an  alarm,  that
	function doesn't currently exist although  we  discussed  using
	the Historian to record events.
1365.2SNIFFER model worth consideringENUF::GASSMANThu Aug 22 1991 16:549
    Having just spent a few days on a SNIFFER, I found their model of 
    capture and display useful, and may be something to consider in the 
    design of a future MCC funtion.  The capture buffer will grab 'events' 
    that meet filter criteria, based on quite a few different type of 
    attributes.  THEN, the display function can either display and analyze 
    all captured events, or a second filter can be placed on the captured 
    data so only the events of your interest are shown.  
    
    bill
1365.3to file on the notify command worksTOOK::CALLANDERJill Callander DTN 226-5316Tue Aug 27 1991 16:0813
    
    not real "nice" but it does work....
    
    you can set up the fcl running through a set host/log and
    then start the notify commands running. This will produce a log
    for any entity you ask it to pick up events on.
    
    the other option is to use the TO FILE qualifier and put that
    on the end of the notify command, this will automatically pipe
    the events to the file specified.
    
    jill
    
1365.4Will TO FILE capture evry thing ?CLARID::PATELWe'll get it right on the nightWed Aug 28 1991 06:414
    Will the TO FILE, pass all events that came in to the file or just the
    ones for which a rule fired ?
    
    Amrit
1365.5to file based on commandTOOK::CALLANDERJill Callander DTN 226-5316Wed Sep 04 1991 10:5619
The notify command from the fcl is significantly more powerful than the
functions we made available from the map.

The notify command allows the user to request rule events, as well
as events ony other entity class that supports them. The command (NOTIFY)
and it's arguments are discussed in the BMS Use manual.

If you enter a command like:
	NOTIFY DOMAIN foo, to file foo.events
This will only put rule events (rule fired, and rule exception) into the
file foo.events.

If you enter a command like:
	NOTIFY DOMAIN foo rules=(*), events=(any events), entity list=(node4 *)
You will get the rule events (fired and exception, as well as any event
generated on the node4 global entities in domain foo. To find out the list
of entities in domain foo, you can do a show domain foo memeber * all ident
and you will see the members of the domain.

1365.6thanksCLARID::PATELWe'll get it right on the nightWed Sep 04 1991 14:123
    Things are looking more promising ... :-)

    Thanks
1365.7v1.2 notifGOSTE::CALLANDERSat Sep 07 1991 10:513
    if you think what you have in v1.1 is "more promising" just wait
    til you see what you get in v1.2!
    
1365.8audit trail of all configuration changesHGOVC::LILLIANTANGMon Sep 23 1991 23:516
    How about recording all activities related to configuration changes? 
    
    Currently events are limited to only a few entity class and may not
    include all changes made.  A customer we encounter wants an audit
    trail of all changes (e.g. enabling/disabling a bridge line) to all
    entities.  Any suggestions? thanks, Lillian