MARS didnt captured the Syslog for a Switch

Hi All,
I have CSMARS configured for my enterprise network. In one of the major incidents, one of the line card of my 6509 went faulty with following syslog,
09-19-2010 09:59:40 UTC Local0.Error 192.168.228.3 150: Sep 19 15:19:32 IST: %EARL-SP-3-RESET_LC: Resetting module in slot 1. (Errorcode 1)
09-19-2010 09:59:40 UTC Local0.Error 192.168.228.3 151: Sep 19 15:19:32 IST: %PF_ASIC-SPSTBY-3-ASIC_DUMP: [0:0x20C] ME_AR_P2MMU_FREE_TAIL = 0x28E
However this syslog message was not captured by the CSMARS, or may be i am not getting a way to locate this error in the incidents tab.
Please help me in understanding if CSMARS captures all the events or not. Or i have to enable some events to be forwarded to CSMARS. Or if the log is registered, how can i find this log in the MARS.

EDIT:
I just noticed the attachment in your last message. It looks like you've mis-configured the device type in MARS.
If you are running Native IOS on your 6509 (such as 12.2SXH or SXI), the device type should be "Cisco Switch-IOS 12.2" to parse the logs correctly. The device type "Cisco IOS 12.2" is for routers running IOS 12.2.
I'm going to assume the faulty line card is not in the critical path between this switch and your MARS server (correct?). Otherwise, halijenn's comment applies.
Anyway, have you verified that you're receiving logs from that switch in MARS? Have you verified they are being parsed correctly? The easiest way is to run a query in MARS.
- Run a query for the last 7 or more days
- "Result Format" should be "All Matching Events" (or all matching sessions)
- Under "Reporting Device", select the switch in question
This will return any events from that switch, and verify that it's reporting (and being parsed) properly.
If that's successful, I would run a second query.
- Change the "Result Format" to "All Matching Event Raw Messages"
- Limit the time frame to an hour before and after the timestamp on the log you pasted above
- Under "Keyword", add "EARL\-SP\-3\-RESET\_LC" (without quotes), and set "Operation" to "OR"
- In the second field, enter "PF\_ASIC\-SPSTBY\-3\-ASIC\_DUMP" (no quotes)
This is a regular expression that should match the logs you're looking for. Apply the settings and run the query. This should tell you if MARS at least received the log. If it did, then more work will need to be done to figure out why it didn't report properly.
Just FYI -- it's very possible that MARS could not completely parse that specific log, which happens with a lot of messages from the 6509s. It often reports them as "Generic IOS Syslog" or something similar.

Similar Messages

Need to capture the excise for the excise tab missing item in GR

Hi Masters
Our users has done MIGO with one line item(for Material A) with excise item tab and other line item(fro MAterial B) without excise item tab(non availability of Chapter ID).
They are able to capture excise in J1IEX for the first item only with the help of GR document.
But they want to capture the excise for the second line item?
When we process the same GR document in J1IEX once again it shows error that documeny has been already processed.
How to resolve this?
Regards
Mohanraj.C

Hi,
If u have done only GR for Both materials then Cancel ur GR and Post it again.
And if you have Done J1iex for first material then Cancel GR first then Cancel Excise Invoice.
Now to cancel Excise Invoice follow the path as
From the SAP Easy Access screen, choose Logistics ® Materials Management ® Inventory Management ® Goods Movement ® Goods Movement (MIGO).
In the top line:
Select Cancellation.
Select Material document.
Enter the number of the goods receipt that you want to cancel
Choose .
Flag all of the line items as OK.
Save the reversal document.
Reversing CENVAT Postings
From the SAP Easy Access screen, choose Indirect Taxes ® Procurement ® Excise Invoice ® Incoming Excise Invoices ® Individual Processing ® Change/Display/Post/Cancel.
In the top line:
Select Post CENVAT.
Select Vendor Excise Invoice.
Enter the excise invoice number.
Choose .
Choose Simulate CENVAT.
A dialog box appears, showing which postings the system will make to reverse the CENVAT.
To close the dialog box, choose .
Choose Post CENVAT.
Canceling Excise Invoices
From the SAP Easy Access screen, choose Indirect Taxes ® Procurement ® Excise Invoice ® Incoming Excise Invoices ® Individual Processing ® Change/Display/Post/Cancel.
In the top line:
Select Cancel.
Select Vendor Excise Invoice.
Enter the excise invoice number.
Choose .
Save the excise invoice
if Not solved then please specify that is error by system.
Regards,
Pardeep malik

How to capture the screen for sending the mail

dear sir,
How to capture the screen for sending the mail .. Is there any funtion module or anyother way ? .. How to do this .. Please tell me..
Regards,
Kumar

dear sir,
s thats my problem ?
Regards,
kumar

Capturing the time for rendering the JSFscreen.

I have a JSF application running on WAS6.1. We have some performance issues.
The JSF rendering is taking long time to render the page. All the database operation ie querying the database and leaving the prerender method is happening so fast.
So how can we capture the time for the JSF components to render the page. Is there any way to do that?

i tried to implement the phase listener.But im getting an error message in the JSP saying
JSPG0046E: Unable to locate tagfile for tag phaseListener
My action getting triggered on click of a tab. So in my JSP page I mentioned as
<ui:tab action="#{reportsView.kpiRanking_action}" binding="#{reportsView.kpiRankingStore}"
id false*/;
openPreloadWindow(); 
document.getElementById("form1:periodTypeDropDown")[2].selected = true;
savePeriodType();"
style="height: 25px; text-align: center; vertical-align: middle; width: 91px;cursor: pointer;" text="Store KPI Ranking">
<f:phaseListener binding="#{reportsView.phaseListenerImpl}" type="com.capricorn.sckpi.PhaseListenerImpl"/>
<ui:panelLayout binding="#{reportsView.layoutPanel30}" id="layoutPanel30" style="height: 335px; width: 100%; overflow-y: auto;">
<ui:table augmentTitle="false" binding="#{reportsView.storeWithinDistrictTableStore}"
id="storeWithinDistrictTableStore"
style="height: 100%; left: 0px; top: 0px; position: relative; width: 100%" title="KPI Ranking">
<ui:tableRowGroup binding="#{reportsView.storeWithinDistrictRowGroupStore}"
id="storeWithinDistrictRowGroupStore" sourceData="#{reportsView.defaultTableDataProvider}" sourceVar="currentRow"/>
</ui:table>
<ui:table augmentTitle="false" binding="#{reportsView.storeWithinDistrictTableStore1}"
id="storeWithinDistrictTableStore1"
style="height: 100%; left: 0px; top: 0px; position: relative; width: 100%" title="YTD Ranking">
<ui:tableRowGroup binding="#{reportsView.storeWithinDistrictRowGroupStore1}"
id="storeWithinDistrictRowGroupStore1" sourceData="#{reportsView.defaultTableDataProvider}" sourceVar="currentRow"/>
</ui:table>
</ui:panelLayout>
</ui:tab>
My header for JSP is
<jsp:root version="1.2" xmlns:f="http://java.sun.com/jsf/core" xmlns:h="http://java.sun.com/jsf/html" xmlns:jsp="http://java.sun.com/JSP/Page" xmlns:ui="http://www.sun.com/web/ui">
<jsp:directive.page contentType="text/html;charset=UTF-8" pageEncoding="UTF-8"/>
Please help.

I ordered mac OS and I got the email for License and I didnt get the attachement for content code. Please help me getting the content code.

I ordered mac OS and I got the email for License and I didnt get the attachement for content code. Please help me getting the content code.

It's a two email process, one email has a locked pdf with the redemption code. The second email has the password to unlock the pdf. They come separetly, so you may have to wait for the 2nd to arrive.

Hi , i didnt get the email for my secuity question , am trying from 2 weeks , please help , thanx

hi
i didnt get the answer for the security question

I spoke with Apple Support this morning and they believe anything MobileMe related is due to the conversion over to iCloud that's taking place.
As for other email clients, check with your host to see if settings have changed on their end. I use inmotionhosting.com and over the weekend the updated their outgoing requirements so that a password authentication is now needed.
Hope that helps get some on the right path to resolving their issues!

How i can capture the value for ovs selector in web dynpro application

hi
i create one OVS for SALES DOCUMNT MY PRIMARY KEY
FILED IS VBELN AND I WANT GENERATE ONE REPORTS FOR SALES DOCUMENT HOW THIS SERCH HELP IS CAPTURE THE VALUE I WANT TO SOULATION

>
awadhesh chandel wrote:
> hi
> i create one OVS for SALES DOCUMNT MY PRIMARY KEY
> FILED IS VBELN AND I WANT GENERATE ONE REPORTS FOR SALES DOCUMENT HOW THIS SERCH HELP IS CAPTURE THE VALUE I WANT TO SOULATION
I am afraid that you are going to have to supply a few more details. What exactly are you having problems with? Do you need help creating the OVS? Or perhaps on how to capture the input from the OVS? Or do you nee dhelp actually generating the report of the sales documents itself?

How does the return sales order captured the price for mat. Doc. during GI

Dear Guru,
We have a commercial return sales order process, which we have created a Doc Type YR01 "Commercial Return"
everytime when this YR01 is been generated from the Customer Return PO, we need to change the MAP via tcode MR21.
Problem here, this time the user processed with a wrong step, the user straight away to create a DO and GI for this YR01 before the MAP is changed. SO obviously the price in Material Document generated when GI is inccorect, thus a reversal for this GI and DO is done.
After DO and GI is reversed, we update the correct MAP via MR21 and perform a DO and then GI, but we realized the Price in material document doesn't capture the latest updated MAP price.
So after many testing, we found there are 2 ways to solve this,
1. Recreate a new YR01 Commercial return sales order
2. Or during the MR21, select the variance "Special Stock - Sales Order"
Question,
Can i know where does the SO capture the MAP price and where and which table that the MR21 will be updating when selected variant "special stock - sales order"?
Thank you very much,
Chee Wee

Hi,
The price entered in MR21 updates the price for the material in material master "accounting 1" tab page. This will update the price in the table MBEW according to the valutaion class you have assigned to the material type.
If you are entering "Special Stock - Sales Order" in MR21. the valuation class for sales order stock should be assigned for the material in the material master "accounting 1" tab page MBEW-EKLAS, this valuation class will have an altogether different accounting, so according to me option 1 i.e reversal of document YR01 is a more easier solution.
Regards
Aadesh Kamat
Edited by: aadesh123 on Jul 11, 2011 10:45 AM
Edited by: aadesh123 on Jul 11, 2011 10:48 AM

Problems with the condition for a switch in our IntegrationProcess

Hi,
we're relatively new in using the XI-IntegrationBuilder and we have a small problem.
We try to define a switch-condition to perform two different Transformations depending on a specific value of a message element.
The condition looks like this:
(IncomingRequest./p1:MT_XI_REQUEST/status = donormal)
Both 'sides' of the condition are of the type (xsd:string).
But it seems the condition is not working in the right way.
It always uses the Transformation 'merge' (pls see image of IntegrationProcess->here the Transformation is shown as 'me').
<a href="http://www.edwebservice.de/uploads/a1a956a10f.jpg">Image of sampleprocess</a> (this is only a testprocess to show what we want to do)
For testing we already run the process without the switch (making it linear), by using each transformation occurring in the switch on its own. Both tests worked well and returned the expected different values. But as mentioned above when we're using both Transformations in the switch, always the Transformation 'merge' is performed.
It does NOT matter if the Transformation 'merge' is placed in the 'if' or in the 'otherwise' branch. It does NOT matter what value (true/false) the condition should return.
Maybe its a basic desing-problem of our process?
<b>Any suggestions will be appreciated</b>
Regards!
Georg
Our systemenvironment:
Runtime
Java version:1.5.0_01
Java vendor:Sun Microsystems Inc.
Version
Service pack:15
Release:NW04_15_REL
Latest change:15767
Sync time:200603080654
ps: we already checked the OSS note 890760 for resolution. but this didn't solve the problem.

Hi!
@Peter:
1) the namspaces are the same. we ckecked it already.
2) status is an element NOT an attribute
3) it is the same value (no blanks etc.)
we will try to run XI with 1.4.2
@Udo:
We know how to use XPath a litte bit and were to customize an expression in the conditioneditor. We only thought that you could mean a 'special functionality' of XI
Thanks for your ideas so far!
Regards!
Georg

CDHDR does not capture the Tcode for vendor master address changes:

Hi Guys,
Wish you a happy new year.
I have the problem to track the changes of the vendor master. I have a vendor master, which got changed by one user. If I look the change history, I can be able to see the change document number, old value and new value. based on that I used CDHDR table to find out the TCODE which is used for this change, but found no value in the TCODE field. What is the meaning of this? Is it meant to say that this field is updated by other sources other than direct changes (XK02/MK02)? If such a case, is it possible to find out the program or LSMW or BW, etc...which is used for this change?

>
Smart Sometimes wrote:
> do we have the option to search the changes based on the USER id for a particular date?
Which userid? SCN or SAP userid?

Is possible turn off the CapsLock for tool switch?

Sorry about my English at first.
Is any possible disable the 'CapsLock' in Photoshop?
Some useless combination or shortcut for me...
1.
CAPSLOCK + LBM
Reset area [Fit to screen I guess] and give a rectangle for re-zoom in.
2.
CAPSLOCK [ In brush mode ]
Toggle between "Precise" vs "Full Size Brush Tip"

There is no way to turn off the 'function' in Photoshop ?
I mean...why user can edit a Shortcut for toggle 'Layer'...but dont allow user redefine the CapsLock key for ?

????Mr. Dennis Knutson Please see the subvi for HP34903A switch. Did I make any mistakes?

I just add the 34970A Initialize.vi and 34970A Close.vi together with 34970A switch.vi. I tried the experiment again and again. I still can not open/close the 34903A switches indepedently on slot2. Please see the attached vi. Did I make any mistakes?
Attachments:
HP34903Asw.vi ‏49 KB

You're calling initialize every time. If you look inside this VI, you'll see that if you don't choose reset, the command SYSTRES is issued which will preset the instrument to a known configuration. You do not want to call initialize every time. It is enough to call it at the very beginning of your program and then just call HP34970A Switch.vi by itself whenever you want to open and close a relay.

Packet capture on 3020 for HP switch

Hello
Can anyone tell me if a SPAN session (source of one of the virtual ports 1-16 to a destination physical ports, eg. 19) should behave completely as normal? Seem to only be getting control traffic, ARP/CDP/STP etc. A SPAN session involving the Fa 0 port is not possible.
Thanks

The answer is "yes, it can" but if you've got Trend Micro Office Scan v10.0 running on your laptop you may have to unload it first or you'll only see control traffic as it stops your NIC going into promiscuous mode!!

Can Cisco Mars do the reporting for all devices (checkpint, ISS etc)

Is this is true that cisco mars can do the reporting for all the devices(like checkpoint, juniper, sonicwall, and IBM-ISS ) devices.
Requesting plz reply ASAP

no, it's not true. the following MARS lists what mars has direct support for:
http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/compatibility/local_controller/dtlc43x.html
Anything else would require creating a custom parser, which is great functionality to have in a pinch but is a major pita to maintain. That's one of the biggest reasons to buy a SIM in the first place, so you don't have to manage parsing yourself.

Capture Excise Invoice for material document created against a PGR

Hi SD Gurus,
We have a scenario of reverse subcontracting where we have to receive raw material from vendor, process it and then dispatch the finished goods to the vendor or the vendor's customer.
For receiving the raw materials, i have created a document type which is copied from standard RE type. Against this order, a returns delivery is created which is then PGR-ed. With reference to the previous document, a service order is created in SD, which is then billed.
But i am facing a problem when i tried to capture the incoming excise invoice for the raw materials. When i tried to capture the excise against the material document generated for PGR, the system is throwing a error, that it cannot capture the excise for this materia document type.
I would be greatly obliged if anyone can throw some light on this. Do i need to maintain any special configuration for this? Why is SAP not allowing it? How this can be done?
With Regards,
Arindam Datta.

Dear Arun R,
You Kindly go to the following path and maintain your movement type over their and do the MIGO.I am very sure at the time ot migo excise tab will come for part-1 updation and subsequently you capture part-2 on J1IEX.
SPRO->LG->Tax on Goods Movemet->India->Business Transactions->Incoming Excise Invoice->Specify which movement type involve excise Invoices.
Hope this will help you out.
Regards
AKS

MARS didnt captured the Syslog for a Switch

Similar Messages

Maybe you are looking for