Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
HP.com home
Education & Training  >  Find a course 

Managing Events with HP NNM, Operations and ECS Composer Software

» 

Business & IT Services

» 

Education & Training
US & Canada home

» Special deals
» What's new
» Register for class
» Locations
» Find a course
» ProLiant
» Business Analysis
» HP-UX
» HP Indigo
» HP Integrity
» HP NonStop
» HP Software (OpenView)
» HP OpenVMS
» HP Tru64
» HP VSE
» Imaging & printing
» iPAQ & Tablet PC
» ITSM / ITIL
» Linux
» Microsoft
» MPE/iX
» Project Management
» Service & support
» Storage & SAN
» VMware
» Printable catalogs
» Find training in other countries
» Certification
» Education consulting
» HP Virtual Rooms
» ITRC / Online training
Content starts here
At a glance
View schedule & enroll Sorted by: location or date
Course number UC342S
Length 5 days
Delivery method Remotely assisted instructional learning ( RAIL)
Instructor-led training ( ILT)
Onsite dedicated training ( OST)
Price USD $3,450
CAD $3,600

Course overview

This course reviews the event systems of NNM 7.x and Operations Manager for Unix (OMU). It describes strategies for distributing SNMP traps between NNM and OMU systems, and for capturing syslog events. Techniques for reducing the events seen by NNM and Operations users are studied. Labs provide hands-on practice correlating events, using ECS Composer with NNM and Operations. This course is for those with experience using NNM or Operations as event capture and configuration tools.


Prerequisites

  • HP Operations Manager for Unix: Administration 1 (H4356S), or HP Network Node Manager 1: Essentials (UC340S)
  • HP Operations Manager for Unix:: Administration 2 (H4357S) recommended for OMU students

Audience

  • HP Software Customers: NNM and Operations administrators, system and network administrators, architects and planners
  • HP Software Channel Partners, NNM and Operations consultants: system architects, integrators, and planners
  • HP Software Engineers involved in pre-sales and post-sales

Ways to save

Course objectives

  • Configure monitoring and response to SNMP traps received by either NNM or Operations
  • Capture syslog events using either Operations or NNM
  • Describe the techniques used to distribute SNMP traps in a mixed NNM and Operations environment
  • Select the most appropriate technology to reduce browser “noise” by selecting alarms or messages to display or discard
  • Configure ECS and ECS Composer to recognize patterns in alarms or messages and suppress or change them appropriately

Next steps

  • HP Network Node Manager Software II (UC341S)
  • HP Operations Manager for UNIX II (Advanced Administration) (H4357S)

Benefits to you

Learn how to:

  • Improve operator efficiency by eliminating redundant or distracting events from the NNM Alarm Browser and/or Operations Message Browser
  • Capture syslog events with either NNM or Operations
  • Learn the principles of a state-based event browser
  • Practice event reduction techniques for NNM and Operations
  • Create custom ECS Composer correlators for advanced event reduction unique to your environment and equipment needs

Course outline

Overview

  • Event Management Objectives
  • What is an Event?
  • OVO and NNM technologies
  • Event Reduction techniques

Configuring Events and Alarms in NNM

  • Event Subsystem and Processing
  • Event Envelope and Contents
  • Creating and Modifying Event Configurations

Overview System and Application Monitoring

  • Message Sources and Processing Flow
  • General Configuration Steps
  • Message Source Templates Window
  • Organizing Templates with Template Groups
  • Copying Templates
  • Assigning and Distributing Templates

Monitoring Logfiles

  • Applications, Systems, and Log Files
  • The OVO Logfile Encapsulator
  • Log File Template Configuration

Discriminating between Log Messages

  • Message Condition Types
  • Message Processing on the Managed Node
  • Message and Suppress Conditions
  • Variables Used in Templates

Pattern Matching

  • OVO Pattern Matching
  • Pattern Matching Expressions and Rules
  • Extract Variable Assignment
  • The Pattern Matching Tester - opcpat

Message Interceptor and opcmsg

  • Message Interceptor
  • Message Template and Condition Configuration
  • Using opcmsg with -option

SNMP Trap Interceptor

  • SNMP Traps
  • SNMP Template Configuration
  • Using ovtrapopc
  • SNMP Trap Condition Example

Configuring Event Forwarding

  • Distributed Event Monitoring
  • What Events Should Be Forwarded?
  • Configuring Event Forwarding
  • Forwarding Threshold Events
  • Forwarding and Correlation

Distributed SNMP Trap Management

  • OVO Distributed Event Interception
  • Using ovtrap2opc
  • SNMP Trap Interceptor on the Management Server
  • Distributed Event Interception - Benefits and Configuration
  • Avoiding Duplicate Messages

Configuring syslog Messages for SNMP

  • Converting syslog Messages to SNMP Traps
  • Configuration Prerequisites and Overview
  • NNM syslog Main GUI
  • Extract Patterns and Variable Assignment
  • Sending an SNMP Message on a Condition
  • Suppressing a syslog Pattern
  • The Syslog to NNM Template
  • Modifying or Adding Conditions and Varbinds
  • Deploying and Testing
  • syslog and Overlapping IP Addresses

Introduction to Event Correlation

  • Goal of Event Reduction
  • Deploying Event Reduction
  • Event Reduction Techniques
  • Event Correlation Services
  • OVO Message Strem Interface and ECS
  • ECS in NNM
  • Composer: the "Super" Circuit
  • eveloping Event Correlation

OVO Message Reduction

  • Message Reduction in OVO
  • Duplicate Message Suppression on the Manager and Agent
  • Creating Duplicates with Message Keys
  • What is a "State-Based" Browser
  • Message Key Relations

Correlating OVO Messages with ECS and Composer

  • Event Correlation Service in OVO
  • Event Correlation on the Managed Node
  • Management Server Architecture
  • Event Correlation in OVO with Designer
  • Configuring a Template for use by ECS
  • Deploying the ECS Agent Template
  • Enabling the Server MSI
  • Using hp OpenView Correlation Composer

Configuring NNM Event Correlation

  • ECS Configuration Files
  • The ECS Event Configuration GUI
  • CEnabling and Disabling Correlations
  • Composer: Configuring NNM-Shipped Correlators
  • Modifying Event Correlations and Parameters
  • Netmon Accelerated Polling
  • Connector Down Correlation
  • Configuring Secondary Failure Options
  • ConnectorDown Correlation with NNM Extended Topology
  • PairWise Event Correlation and Pattern Delete
  • Repeated Events Correlation and Event De-Duplication
  • ovtrapd Event Blocking (UNIX Only)
  • Scheduled Maintenance Correlation
  • Copying a Correlation

Introduction to Composer Development

  • Correlator Evaluation and Development Process
  • Composer User Interface Modes
  • Starting the Composer Developer Interface
  • Setting the Event Type
  • Selecting a Template
  • Opening a Correlator Store
  • Exclusive Access to Correlator Stores for NNM
  • Development and Runtime Correlator Stores - OVO
  • Configuring a NameSpace (NNM only)
  • Configuring the Security and Deployment Files (NNM only)
  • Deploying Correlators

Creating a Basic Correlator

  • Composer Roadmap
  • Suppress Correlator Template
  • Creating a Correlator
  • Select Incoming Events
  • Alarm Signature
  • Operators
  • Suppress Example
  • Event Contents and Varbinds

Using Variables in Correlators

  • Variable Types and Scope
  • Advanced Filters
  • Configuring a Lookup Variable
  • Editing the Data Store
  • Extract Variable Assignment and Definition
  • Creating a Combine Variable
  • Enhance Correlator Template
  • New Event Creation

Using Additional Correlators

  • Mutiple Events
  • Message Key s
  • Automatic Variables
  • Repeated, Rate, and Transient Correlator Templates

Using Callbacks and Built-In Functions

  • Variables that Access Functions
  • Variable and Function Evaluation
  • Callbacks
  • Passing Parameters to Functions
  • Built-In Functions
  • Keys and Functions
  • getbyIndex to Access Multiple Return Values
  • Load Perl or C Library

Combining Correlators

  • Suppress and Multi-Source Examples
  • The Combined Impact
  • Advanced Function Example
  • Concept of Feedback
  • Composer Event Flow

Best Practices, Tools and Information

  • Migrating, Viewing, or Merging Correlator Store Files (NNM only)
  • Analyzing, Capturing, and Replaying Events (NNM only)
  • Tracing Events and Function Debugging

UC342S C.00
Printable version
Privacy statement Using this site means you accept its terms Feedback to Education & Training
© 2008 Hewlett-Packard Development Company, L.P.