Collect Lenovo BladeCenter SNMP Trap Error Events

IBM.BladeCenter.SNMPTrap.ErrorEventCollection (Rule)

Knowledge Base article:

Summary

This discovery rule is used to collect Lenovo BladeCenter SNMP error events.

Element properties:

TargetIBM.BladeCenter
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
SnmpDS DataSource IBM.SnmpTrap.EventProvider Default
EventFilter ConditionDetection System.ExpressionFilter Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="IBM.BladeCenter.SNMPTrap.ErrorEventCollection" Enabled="true" Target="IBM.BladeCenter" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="SnmpDS" TypeID="IBM.SnmpTrap.EventProvider">
<IP>$Target/Property[Type="NetLib!Microsoft.SystemCenter.NetworkDevice"]/IPAddress$</IP>
<CommunityString>$Target/Property[Type="NetLib!Microsoft.SystemCenter.NetworkDevice"]/CommunityString$</CommunityString>
<AllTraps>true</AllTraps>
<OIDProps/>
<EventLevel>1</EventLevel>
</DataSource>
</DataSources>
<ConditionDetection ID="EventFilter" TypeID="System!System.ExpressionFilter">
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">EventData/DataItem/SnmpVarBinds/SnmpVarBind[OID='1.3.6.1.4.1.2.6.158.3.1.1.7'][1]/Value</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>