HPE Storage WEBES Event Catcher Rule

HPEnterpriseStorageEVAP6000MP.WEBES.Event.Catcher.Rule (Rule)

Knowledge Base article:

Element properties:

Member Modules:

Source Code:

<Rule ID="HPEnterpriseStorageEVAP6000MP.WEBES.Event.Catcher.Rule" Enabled="true" Target="HPEnterpriseStorageEVAP6000MP.WEBES.Listener.WindowsService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1010</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>WEBESEventListener</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <ConditionDetection ID="s" TypeID="SystemLibrary!System.Event.GenericDataMapper">

    <EventOriginId>$Target/Id$</EventOriginId>

    <PublisherId>$MPElement$</PublisherId>

    <PublisherName>HPE EVA P6000</PublisherName>

    <Channel>Operation Manager</Channel>

    <LoggingComputer>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</LoggingComputer>

    <EventNumber>52000</EventNumber>

    <EventCategory>0</EventCategory>

    <EventLevel>$Data/EventLevel$</EventLevel>

    <UserName>Administrator</UserName>

    <Description>$Data/EventDescription$</Description>

    <Params/>

  </ConditionDetection>

  <WriteActions>

    <WriteAction ID="AlertScript" TypeID="WindowsLibrary!Microsoft.Windows.ScriptWriteAction">

      <ScriptName>HPEnterpriseStorageEVAP6000MP.AlertSCRIPT.vbs</ScriptName>

      <Arguments>"$Data/EventDescription$"</Arguments>

      <ScriptBody><Script>

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

'Purpose: Script to get details of HPE EVA P6000 Alerts.

'Return Vaues :  System Base Data 

'Date Created: 14th September 2012

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

Dim objAPI,oArgs,Description,Source,Sev,severity

Dim intTmp, intTmp1, intTmp2



Const EVENT_TYPE_ERROR   = 1

Const EVENT_TYPE_WARNING = 2

Const EVENT_TYPE_INFORMATION = 4

severity = EVENT_TYPE_WARNING

Set objAPI = CreateObject("MOM.ScriptAPI")

Set oArgs = WScript.Arguments



Description        = oArgs(0)

strTmp = Description

Description = Replace(Description,"\n",VBLF)

intTmp = instr(strTmp,"Severity:")

intTmp = intTmp + 9



intTmp1 = instr(strTmp,"Time:")

intTmp1 = intTmp1 + 5



intTmp2 = intTmp1 - intTmp

sev = Mid(strTmp,intTmp,intTmp2)

if(instr(sev,"Error") &gt; 0) then 

	severity = EVENT_TYPE_ERROR

  Call objAPI.LogScriptEvent("", 110, severity ,Description)

elseif(instr(sev,"Warning") &gt; 0) then

  severity = EVENT_TYPE_WARNING

  Call objAPI.LogScriptEvent("", 110, severity ,Description)

end if 













</Script></ScriptBody>

      <TimeoutSeconds>150</TimeoutSeconds>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>