DX NetOps

Morning all,

We have an issue at a client where NFA is supposed to be sending event Traps to CAPC and in turn to Spectrum.

The Log traps are being sent from NFA to CAPC, but no events.

The NFA logs are not showing any event trap traffic to CAPC.

CA PC 2.3.2.1 is installed

NFA 9.3.0 is installed

In NFA the following has been done:

• In Application Settings the CAPC IP address has been entered as the Trap Destination
• Set up Trap Definitions on 2 specific protocols with thresholds lower than what is indicated in the Stacked Protocol trend.

In CAPC the following has been done:

• NFA is a Data Soucre
• Spectrum is a Data Source
• Event Manager is a Data Source
• We have carried out Full Synchronisation on NFA

Are there any ideas on what could be causing this problem, and how to rectify it?

Regards

Kurt Meyer

In NFA->Admin->Application Settings set the trap destination to the IP address of the NFA console server.

CAPC is not able to receive traps directly, so they need to be sent to the NFA console and then they are synced up to CAPC.

See this doc for more details Tech Tips:  How do I get alerts configured in NFA to show up in CAPC as Events?

Thanks Christopher, this has worked.

Events are being passed to PC now, but still nothing to Spectrum. It seems something is not right with Event Manager/Spectrum link.

We get the following error in the Spectrum Tomcat Catalina.out file.

(PoolThread-390251: GlobalPool => NPCEventManagerWebserviceURLPoller) (NetqosEventLog) - (ERROR) - Unable to contact Event Manager - stopping all polling.

We have found this KB article "Tec1508405", which says to drop the netqos database in the OneClick server, and then reboot tomcat.

Does this terminate Spectrum as a data Source in CA PC, and then we have to add Spectrum as a Data Source again?

Okay, some progress. 

I don't think you need to drop the Spectrum data source based on this error.

Spectrum is failing to connect to the Event Manager Data Source's web service.

In CAPC go to "Admin->Data Sources" and verify that the Event Manager data source is added and Available.

Also check to see that it is added by its actually IP address or route-able host name and not as "localhost".

Event Manager is installed automatically when you install CAPC, and should be added as a data source, however it could have been deleted or their could be some other issue with it.

The logs for EventManager should be in /opt/CA/PerformanceCenter/EM/logs

Hi Christopher,

Event Manager is a Data Source and Available, Ver 3.01

It was added with its own IP address.

I ran a grep through the EMService.log for anything to do with protocol or threshold or violation, and nothing came up.

Any errors in the EMService.log?

The spectrum log should also show the URL its trying to connect to the Event Manager service, you can try loading this URL from the Spectrum server and see if it connects, and also try loading the URL locally on the CAPC server.

Check that port 8181 and 8281 are open between Spectrum and the CAPC server.

https://wiki.ca.com/display/CAPM250/Prepare+to+Install+Performance+Center#PreparetoInstallPerformanceCenter-VerifyCommunicationPorts

Hi Christopher,

Apologies for taking so long to answer, but we had another call on our hands that took priority.

I have finally managed to resolved this story.

I took the documentation and carried out a step by step analysis of what had been done and what had not for the integration.

When we took over this call, it had apparently been going for a few months already, so we assumed all the necessary steps had been taken. Turns out not all steps had been carried out.

The engineer that had done the upgrade made a few small mistakes, but all of them combined prevented the system from completing the integration loop.

• The IP Domain Global Collection had not been populated. He was under the misconception that the IP Domain Global Collection only had to be populated if the Data Aggregator was being used.
• In NFA the Trap Destination was pointed towards Spectrum, and not NFA Console. I received quite a bit of opposition on these first two points from the client as they believed the previous engineer, and as a result they were not prepared to let me make the changes.
• Notifications in PC had been setup as well, but that's only for sending traps, not events.
• Trap Configurations in NFA had not been done. No Alerts, no event ...

Anyway, on Friday I made these 4 changes to their systems, and they are not receiving the NFA alarms in Spectrum.

Thanks very much for your help in pointing me in the right directions to resolve this issue.

Regards

Kurt

This is incorrect :Anyway, on Friday I made these 4 changes to their systems, and they are not receiving the NFA alarms in Spectrum.

It must read "and they are receiving the NFA alarms in Spectrum"