Rule for Modular Server System Event Policy Id 3421

Intel.Hardware.ModularServer.AlertRule_Policy3421 (Rule)

This rule generate alerts for the Event Policy 3421 configured in Chassis Management Module of Modular Server System.

Knowledge Base article:

Summary

The system settings repository failed an integrity check and the settings have been reset to factory default values. The settings affected include event policies, event log, SNMP settings, network time server and user data. The network IP address settings and admin user password were preserved unless the administrator chose to reset these values. Storage and switch settings were not affected. This event concerns only management functions and does not affect the operation of the servers, switches or the storage subsystem..

Causes

When corrupt settings are detected while the CMM is running, the administrator user is allowed to choose a method to restore the settings. Receiving this event indicates that either the administrator chose to restore factory defaults, or, that the system reverted to factory defaults because all other restoration methods failed. If this event is seen frequently, it may indicate that the chassis SD media card is failing..

Resolution

All user account information must be re-entered. Verify that network parameters are set properly. If this event is seen frequently, the SD media card may need to be replaced..

Element properties:

Target

Intel.Hardware.ModularServer.Chassis

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

The settings were reset to factory defaults

Event # {5}. Component : {2}.
{6}.

Event Log

IntelServerTraps

Member Modules:

ID	Module Type	TypeId	RunAs
EventDS	DataSource	Microsoft.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Intel.Hardware.ModularServer.AlertRule_Policy3421" Enabled="true" Target="Intel.Hardware.ModularServer.Chassis" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>IntelServerTraps</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">MultiFlexTrapReceiver</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>$Target/Property[Type='Intel.Hardware.ModularServer.Chassis']/IPAddress$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">Params/Param[11]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="Integer">3421</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Intel.Hardware.ModularServer.AlertMessage_Policy3421"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/Params/Param[1]$</AlertParameter1>

        <AlertParameter2>$Data/Params/Param[2]$</AlertParameter2>

        <AlertParameter3>$Data/Params/Param[5]$</AlertParameter3>

        <AlertParameter4>$Data/Params/Param[7]$</AlertParameter4>

        <AlertParameter5>$Data/Params/Param[8]$</AlertParameter5>

        <AlertParameter6>$Data/Params/Param[9]$</AlertParameter6>

        <AlertParameter7>$Data/Params/Param[10]$</AlertParameter7>

        <AlertParameter8>$Data/Params/Param[11]$</AlertParameter8>

      </AlertParameters>

      <Suppression/>

    </WriteAction>

  </WriteActions>

</Rule>