Dell Remote Access : Chassis Management Controller audit warning.

Dell.iDRAC7.SNMPTrap.8690 (Rule)

Knowledge Base article:

Summary

Chassis Management Controller audit warning.

Causes

Cause	Resolution
The data on the Extended Storage removable flash media SD cards is not synchronized when the CMC is unable to determine which card has the latest data.	Disable and then enable the Extended Storage feature. Using racadm, execute the following commands: "racadm feature -d -c Extended Storage" to disable and then "racadm -a -c Extended Storage" to enable the feature. NOTE: All the data on the removable flash media SD card is erased when the feature is disabled.
The Extended Storage feature activation on the secondary CMC timed out. If the media on Standby CMC doesn't respond within 90 seconds of confirming activation the feature returns to single CMC mode.	Do the following and retry the operation: 1) In the CMC Web interface, go to Chassis Controller > Flash Media > Configuration, and verify if the SD card on secondary CMC displays errors. 2) If errors are displayed, execute the following racadm command: "racadm cmcchangeover". 3) Repair the removable flash media SD Card by selecting the Chassis Controller > Flash Media > Configuration > Repair Active Controller Media in the CMC Web interface. Repairing is only allowed on the SD card of the primary CMC. If the problem persists, replace the card.
The security certificate cannot be uploaded because of an Unexpected Event issue in the Remote Access Controller.	Upload the certificate again and retry operation.

Resolutions

Additional information on this issue may be available. Launch the IDRAC/DRAC Console to debug further.

Element properties:

Target

Dell.RemoteAccess.iDRAC7

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Remotable

True

Alert Message

Dell Remote Access : Chassis Management Controller audit warning.

Event Description: {0}

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	System.NetworkManagement.SnmpTrapEventProvider	Default
Alert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Dell.iDRAC7.SNMPTrap.8690" Enabled="true" Target="DAD!Dell.RemoteAccess.iDRAC7" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Node!System.NetworkManagement.SnmpTrapEventProvider">

      <IP>$Target/Property[Type="DAD!Dell.RemoteAccess.RAC"]/IPAddress$</IP>

      <OIDProps>

        <OIDProp>.1.3.6.1.4.1.674.10892.5.3.2.1.0.8690</OIDProp>

      </OIDProps>

      <EventOriginId>$Target/Id$</EventOriginId>

      <PublisherId>$Target/Id$</PublisherId>

      <PublisherName>iDRAC</PublisherName>

      <Channel>SnmpEvent</Channel>

      <LoggingComputer/>

      <EventNumber>8690</EventNumber>

      <EventCategory>5</EventCategory>

      <EventLevel>10</EventLevel>

      <UserName/>

      <Params/>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Dell.iDRAC7.SNMPTrap.8690.Rule"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/Channel$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

        <SuppressionValue>$Data/EventCategory$</SuppressionValue>

        <SuppressionValue>$Data/EventLevel$</SuppressionValue>

        <SuppressionValue>$Data/UserName$</SuppressionValue>

        <SuppressionValue>$Data/EventNumber$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[6]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[8]/Value$</SuppressionValue>

      </Suppression>

      <Custom1>Alert Message ID = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ </Custom1>

      <Custom2>Alert Message = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$ </Custom2>

      <Custom3>Alert Status = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[5]/Value$ </Custom3>

      <Custom4>Alert Service Tag = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[6]/Value$ </Custom4>

      <Custom5>Alert FQDN = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[7]/Value$ </Custom5>

      <Custom6>Alert FQDD = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[8]/Value$ </Custom6>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>