Fault Monitor in LMS 4

Hi all,
Ciscoworks LMS 4 is very complicated tool for me and it is very hard to configure any cisco device what I need to monitor.
Currently I have 3750-X configured, properly discovered and added to DCR.
I would like to receive SMTP messages(mail) from LMS if some event occurs. For example when link UPDOWN occurs or when LOGIN_FAILED occurs and so on. Is it possible to configure this?
I tried to configure it in Monitor > Monitoring Tools > Fault Monito, but without siccess. LMS tell me that there are no devices available.
How can I configure some notification so it is able to send me message via smtp?
Thank you for answer.
Jan

Hi Joe,
check the below link for more results on Unidentified traps:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_device_fault_manager/3.1
/user/guide/TrapFwd.html#wpxref57860
It looks like "snmp-server enable traps syslog" is enabled on your devices, and this will appears as Unidentified trap , you can stop this by change the configuration on the Device , or disable the "InformAlarm" from the notification Group under : Admin > Network > Notification and Action Settings > Fault Notification Group From the following Link you can check the traps that will generate "INFORM ALARM" event :
I hope this will help
Thanks-
Afroz

Similar Messages

LMS 4.2.1 - unidentified traps in fault monitor

MY LMS, under fault monitor, shows many messages (actually hundreds), "Unidentified Trap Generic Trap:6 Specific Target:1 EnterpriseOid:.1.3.6.1.4.1.9.9.41.2"
This OID leads me down the CISCO-SYSLOG-MIB.my, to ciscoSyslogMIBNotification.
vestigaiton looks like this MIB actually doesn't do anything (other than generate a fault message on LMS).
Anyone have any ideas how I can get rid of this fault in LMS, such as adding the CISCO-SYSLOG-MIB.my to my LMS so that it can at least identify the OID being sent.
Along these lines, I have downloaded the above referenced MIB, and have tried in LMS to upload it, but the "upload MIB" functionality ONLY allows the loading of MIBS which already exist on LMS (only choose a server side path).
Any ideas would be aprpeciated.
Joe

Hi Joe,
check the below link for more results on Unidentified traps:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_device_fault_manager/3.1
/user/guide/TrapFwd.html#wpxref57860
It looks like "snmp-server enable traps syslog" is enabled on your devices, and this will appears as Unidentified trap , you can stop this by change the configuration on the Device , or disable the "InformAlarm" from the notification Group under : Admin > Network > Notification and Action Settings > Fault Notification Group From the following Link you can check the traps that will generate "INFORM ALARM" event :
I hope this will help
Thanks-
Afroz

LMS 4.2 Fault Monitor - Device Name and Frequency of Events

Hi all,
I've just installed LMS 4.2, like it a lot so far. But I'm running into a few problems, and I'm hoping someone out here has a suggestion.
In the Fault Monitor, the Device Name column shows the device's IP address rather than the host name. We need for it to show the host name, for ease of troubleshooting; most folks don't have the IP addresses memorized. Likewise, when an email is sent out for an event, the managed device field also shows up as the device's IP address.
The devices were all discovered with their IP addresses rather than a host name...should LMS have automatically found their host names? Regardless, I manually updated all of the device's host names, yet they still display as an IP address in the fault monitor.
Also, it appears I need to figure out some way to throttle alerts. One particular device will report an event (ie a temperature out of range) dozens of times in a polling period...several per second, even though it's the same alert. Any suggestions on where I can throttle this? My inbox is exploding.
If anyone has any ideas, I would appreciate it!
Jen

I am having the IP vs. device name issue as well. The funny thing is if you hover over the IP of the device in Fault Monitor, you can see the device name listed. I was on a conference call with Cisco recently and pointed this out. One of the reps said the faults and alerts showing IP address issue should be fixed in version 4.2.3, but I don't know if he was basing this on first-hand knowledge or was just assuming. Does anyone know if this is the case?
As for throttling alerts. I had a false positive alert from a device that I put in a custom fault group and changed the threshold on to keep them from firing. You probably have already resolved this issue, but I didn't see a resolution listed here. You would have to determine if raising a threshold for a device is adequate for your situation.
Thank you,
Mark

Not able to see devices in fault monitor LMS 4.0

I can see devices in the managed group ,but cannot see devices in fault monitor,its show no device available

Balbir,
LMS 4.0 is now obsolete. We recommend to use LMS 4.2.x to have the support.
In LMS 4.x the devices are by default managed by each module like fault monitor. Please share a screenshot where you're expecting and don't see devices.
When was this installed? Was it working ever? You can also try to reset your fault Monitor module by reinitializing the DataBase for Fault.
Check the commands from here:
LMS Database Troubleshooting
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Cisco Works LMS 4.0 - Fault Monitor Issue

Hi!,
I have a little problem with the LMS application. when I try to access to the screen of: Monitor --> Monitoring Tools --> Fault Monitor, the application shows an error message that only said: "Sorry an error occurred" and thats all.
Any idea of what can I try in order to solve this?,
Thanks,

Hi Duong!, thanks for your reply. The services was restarted but the problem still exist (the process DFMCTMStartup is allways down although I started manually)
And the only change that I see is that the Fault Monitor Screen show first a message "There are no faults available" but I Have marked 46 Faults!"

LMS 4.2.2 Fault Monitor suspend device

Hello to everyone,
might sound strange but i´m looking for two hours now and can not find a way to suspend a device in the Fault Monitor. We´re using LMS 4.2.2
Can someone point me to the right direction? Thank you.
Regards,
Chris

Ok, found it: Inventory -> Manage Device State -> Device Count -> Suspend!!

LMS 4.0: Fault Monitoring Device Administration stuck in learning

Hello Members,
i have a problem with Fault Monitoring Device Administration. i have two devices which stuck in learning mode for almost forever. When the job is done the devices report an error SNMP timeout. I run a credential verfication job and the credentials for the devices are correct.
any ideas?
regards
alex

Assuming these are the only four devices using SNMPv3 in LMS, then the engineID is a non-issue. However, if any other device has the same engineID as those two non-working devices, the problem could still be a duped engineID. Debugging with logs is fairly complex. The easiest way to identify the problem is to use a sniffer. Start a sniffer trace filtering on all traffic to one of the failing devices. Then, rediscover the device in Fault Monitoring under Admin > Collection Settings > Fault > Fault Monitoring Device Administration. When it goes to a Questioned state, look at the sniffer trace.
If you see SNMP report packets indicating an error of notInWindow, that points to the duplicate engineID problem. ICMP packets without responses points to problems with ping.

Cannot suppress unidentified trap in LMS Fault Monitor

Hello,
We have Ciscoworks LMS upgraded from version 4.0.1 to Cisco Prime 4.1.
DFM is displaying in "Fault Monitor", "Device Fault Summary Tab" an entry which says "Unidentified Trap". In the lower pane titled "Fault for unidentified trap" we have no event to own or clear, so we cannot suppress this line from DFM.
Any fix available ?
Best regards
C.Barbu

There have been known issues with Fault Monitoring Alerts caused by steal entries in EPM database. To fix this, please run the below commands on your server's command prompt (this will delete all the data from the EPM database):
+ Stop daemon manager :
net stop crmdmgtd
+ Re-initialize EPM db as below :
NMSROOT\bin\perl.exe NMSROOT\bin\dbRestoreOrig.pl dsn=dfmEpm dmprefix=EPM
example:
C:\progra1\CSCOpx\bin\perl.exe C:\progra1\CSCOpx\bin\dbRestoreOrig.pl dsn=dfmEpm dmprefix=EPM
+ Start daemon manager:
net start crmdmgtd

LMS 4.2.3 Fault Monitor threshold question

Hello, I would like to know if anyone know how to find out which Fault Threshold group a specific interface belongs to.
The scenario is that in Fault Manager there is an alarm for which I want to change the Threshold Setting.
Example Alarm:
Event_Description HighUtilization
Device IP x.x.x.x
Device Type Routers
Fault Last Updated At 19-Mar-2013 09:44:25
Component IF-router2.x.x/26 [Tu187] [x.x.x.x]
Component Class Interface
Component Event Code 1056
Current Utilization 68.323204 %
Duplex Mode FULLDUPLEX
Event Category Utilization
Event Source DFM
If Description Tunnel187
Max Speed 100000
Traffic Rate 8540.4 BYPS
Type TUNNEL
Utilization Threshold 40
If I look in Monitor > Fault Settings > Setup > Threshold Settings.
Then expand all groups under DFM, there is no group called "Tunnel", so the question is which group this Interface belongs to?
BR /Crille

Its defined as an 10/100 ethernet interface " Component Class Interface" with a 40% threshold utilization which it fell below per the event notifiation of 68.3%.
Component IF-router2.x.x/26 [Tu187] [x.x.x.x]
If Description Tunnel187 --> Interface on router
Max Speed 100000 --> Interface type(Fast Ethernet)

Monitoring with LMS 2.6 or VMS 2.2

Hello,
I have a couple of questions on LMS 2.6 or VMS 2.2
1) Can it monitor a 2811 and an ASA5505?
2) If there is a 2811 and a 5505 on each side of a WAN can it tell me what the bandwidth utilization between the 2 sites is?
Thanks in advance. All replies rated.

Both products are end of life, and VMS 2.2 is now end of support. LMS 2.6 can manage both a 2811 and an ASA5505 in terms of inventory, configuration, syslog, and fault. However, it cannot measure bandwidth utilitzation. LMS does not provide any end-to-end bandwidth utilization measurement, but you can use the Internetwork Performance Monitor tool to look at latency and round-trip response time between the 2811 and the ASA.

Fault View CiscoWorks LMS 4.0.1

Hello
I upgraded the LMS 4.0 with LMS 4.0.1 but now the events are removed of Fault View. The equipaments than I am monitoring are: ME-3600, ME-3800 and ASR 9000. This is a configuration problem or I have to update something else?. Thanks.

Hi,
Are you running a proxy? CSCtk47472
Is your server both forward & reverse resolvable? Under \CSCOpx\bin, do reverse and forward lookup using resolver.pl:
\CSCOpx\bin> perl resolver.pl
\CSCOpx\bin> perl resolver.pl
Are all of your services running? Please open a command prompt and execute 'pdshow -brief'.
Perhaps DFM & DCR are out of sync. You can try to unmanage/manage all devices in DFM in order to force it to sync again.
Thanks

LMS 4.2.2 Fault discovery stalls, never complete

Using LMS 4.2.2 on a network with approx 800 devices. Fault discovery runs for long periods without completion, previously known devices sit in learning state for long long periods. Some devices do become known but this seems random as to which ones. Faults are still reported on devices in a learning state, which means there are often many faults reported which are false. However because devices are in learning state the false positives cannot be weeded out. This problem has been occuring since LMS 4.0 so have not had Fault and event monitoring working properly for some time, however would seriously like to utilise this feature.
Would appreciate any pointers as to where to start... Mark

I am having the IP vs. device name issue as well. The funny thing is if you hover over the IP of the device in Fault Monitor, you can see the device name listed. I was on a conference call with Cisco recently and pointed this out. One of the reps said the faults and alerts showing IP address issue should be fixed in version 4.2.3, but I don't know if he was basing this on first-hand knowledge or was just assuming. Does anyone know if this is the case?
As for throttling alerts. I had a false positive alert from a device that I put in a custom fault group and changed the threshold on to keep them from firing. You probably have already resolved this issue, but I didn't see a resolution listed here. You would have to determine if raising a threshold for a device is adequate for your situation.
Thank you,
Mark

How does CiscoWorks LMS 4.0.1 count faults to display at the top of the portal?

Hi,
just a little niggle I'm hoping someone might have the answer for. In my shiny new LMS 4.0.1 portal I'm looking at the fault count at the top of the screen. This doesn't match what DFM shows me as the number of active faults. I attach screenshots to show - I've got no active warnings on the system but the portal view shows 46. Can anyone tell me what it is counting?
regards,
Aaron

Hi Joe,
thanks for the reply - helpful as ever. After reading the document on reinitialising the DfmEpm database I have two further questions:
1) Should I reintialise all three Dfm databases as the document suggests?
2) Am I going to lose all the modifications I have made to monitoring of individual devices? I've spent days disabling GLBP interface monitoring since LMS can't support that and I'd much rather the count be wrong than do that again.
regards,
Aaron

LMS 4.0 - a fault annotation

Hi,
the customer uses LMS 4.0. He annotated one fault and he cleared this fault. So this fault was cleared and it wasn't seen in the fault monitor. For now the fault is again active and the annotation for this fault is shown. So my question is: Does DFM have some annotation database where all anotation of faults are saved? When the same faults re-occur and the annotation was made for this fault in history - this fault will be displayed with this annotation??
Thank you.
Best Regards
Roman

The annotations are saved to a specific event. If the event re-occurs, that event will have a new ID, so the annotation will not be there. Annotations are saved in the dfmEpm database.

LMS 4.0 - Invisible faults

Since I installed LMS 4, the Faults panel at the top of the screen always reports 4 critical faults. When I click on the red icon to go to the Fault Monitor, I get "No faults are available" (screenshot attached).
Anyone know how to fix this?
Thanks

The quickest way is to reinitialize the DFM databases by following the instructions in https://supportforums.cisco.com/docs/DOC-8796 . However, if you want a more tactical analysis you can open a TAC service request, and they can go through the dfmEpm database to look at why these counters are wrong. The counters should be showing the total number of events, which are the atomic conditions occurring on the devices. This would not necessarily line up to the alerts seen at the top level of the Fault Monitor. However, in your case since you don't see any alerts, you shouldn't have any events.

Fault Monitor in LMS 4

Similar Messages

Maybe you are looking for