Network Manager network events

The Polling engine, ncp_poller, generates events about the state of the network. These events can be used to identify network problems, and are configurable by using the Network Polling GUI (go to Administration > Network > Network Polling). These events are known as network events and have the alerts.status AlertGroup field value of ITNM Monitor.

Each network event is raised on a single entity, such as an interface or a chassis, and the event data is dependent on the type of poll. When network events are forwarded to the ObjectServer for insertion into the alerts.status table, they are allocated an AlertGroup value of ITNM Monitor.

An unlimited set of event identifiers is available for network events. Events that are generated when an SNMP poll fails are specifically allocated an EventID value of NmosSnmpPollFail in the alerts.status table.

Network events in the ObjectServer are pulled back into Network Manager through the Event Gateway to perform event enrichment, including root cause analysis.

Types of events

The Polling engine can generate many different events. Two main classes of events are:

Events on chassis, main nodes, or devices.
Events on interfaces.

Examples of events on chassis, main nodes, or devices include:

Chassis Ping failures
End Node Ping failures

Examples of events on interfaces include:

Interface Ping failures
Interface bandwidth-related events based on thresholds configured in poll policies
OSPF interface events such as events based on the ospfIfMetricValue of the OSPF session configured on an interface

The following example event shows a chassis ping event:

{
        EventName='NmosPingFail',
        Severity=3,
        EntityName='172.22.1.5',
        Description='Default Chassis Ping/Default Chassis Ping fail for 172.22.1.5: ICMP timeout',
        ExtraInfo={
                 EVENTTYPE=1,
                 SOURCE='ncp_poller',
                 AGENTADDRESS='10.21.81.39',
                 MAINNODEENTITYID=1,
                 MAINNODEADDRESS='172.22.1.5',
                 MAINNODEENTITYNAME='172.22.1.5',
                 ENTITYCLASS='Cisco29xx',
                 LINGERTIME=3,
                 ENTITYID=1,
                 ENTITYNAME='172.22.1.5',
                 ENTITYTYPE=1,
                 ACCESSIPADDRESS='172.22.1.5',
                 MONITOREDINSTID=1,
                 POLICYNAME='Default Chassis Ping/Default Chassis Ping',
                 ALERTGROUP='ITNM Monitor',
                 TEMPLATETYPE='Chassis Ping',
                 POLLINTERVAL=120,
                 MONITOREDENTITYID=1
         }
}

The following example event shows an end node Ping fail:

{
        EventName='NmosPingFail',
        Severity=3,
        EntityName='172.22.1.5',
        Description='Default Chassis Ping/Default Chassis Ping fail for 172.22.1.5: ICMP timeout',
        ExtraInfo={
                 EVENTTYPE=1,
                 SOURCE='ncp_poller',
                 AGENTADDRESS='10.21.81.39',
                 MAINNODEENTITYID=1,
                 MAINNODEADDRESS='172.22.1.5',
                 MAINNODEENTITYNAME='172.22.1.5',
                 ENTITYCLASS=‘EndNode’,
                 LINGERTIME=3,
                 ENTITYID=1,
                 ENTITYNAME='172.22.1.5',
                 ENTITYTYPE=1,
                 ACCESSIPADDRESS='172.22.1.5',
                 MONITOREDINSTID=1,
                 POLICYNAME='End Node Ping/End Node Ping',
                 ALERTGROUP='ITNM Monitor',
                 TEMPLATETYPE=‘End Node Ping',
                 POLLINTERVAL=120,
                 MONITOREDENTITYID=1
         }
}

The following example shows an interface ping event:

{
        EventName='NmosPingFail',
        Severity=3,
        EntityName='172.22.1.5[ 0 ]',
        Description='Default Interface Ping/Default Interface Ping fail for 172.22.1.5: ICMP timeout',
        ExtraInfo={
                 EVENTTYPE=1,
                 SOURCE='ncp_poller',
                 AGENTADDRESS='10.21.81.39',
                 MAINNODEENTITYID=1,
                 MAINNODEADDRESS='172.22.1.5',
                 MAINNODEENTITYNAME='172.22.1.5',
                 ENTITYCLASS='Cisco29xx',
                 LINGERTIME=3,
                 ENTITYID=184,
                 ENTITYNAME='172.22.1.5[ 0 ]',
                 ENTITYTYPE=2,
                 ACCESSIPADDRESS='172.22.1.5',
                 IFINDEX=6969,
                 IFTYPESTRING='ethernet-csmacd',
                 IFNAME='0',
                 IFDESCR='Fake MIMIC Interface for IP',
                 IFALIAS='0',
                 INSTANCESTR=6969,
                 MONITOREDINSTID=85,
                 POLICYNAME='Default Interface Ping/Default Interface Ping',
                 ALERTGROUP='ITNM Monitor',
                 ifIndex=6969,
                 TEMPLATETYPE='Interface Ping',
                 POLLINTERVAL=300,
                 MONITOREDENTITYID=184
         }
}

The following example shows an example OSPF event:

{
        EventName='POLL-test_ospf',
        Severity=1,
        EntityName='172.22.1.6',
        Description='',
        ExtraInfo={
                 EventSnmpIndex='172.20.1.6.0.0',
                 LocalPriObj='ospfIfMetricEntry.172.20.1.6.0.0',
                 POLLINTERVAL=60,
                 ospfIfMetricValue=1,
                 ospfIfMetricAddressLessIf=0,
                 ospfIfMetricIpAddress='172.20.1.6',
                 ospfIfMetricTOS=0,
                 EVENTTYPE=1,
                 SOURCE='ncp_poller',
                 AGENTADDRESS='10.21.81.39',
                 MAINNODEENTITYID=1,
                 MAINNODEADDRESS='172.22.1.5',
                 MAINNODEENTITYNAME='172.22.1.5',
                 ENTITYCLASS='Cisco29xx',
                 LINGERTIME=3,
                 CHASSISMANAGED=0,
                 ENTITYID=150,
                 ENTITYNAME='172.22.1.5[ Vl15 ]',
                 ENTITYTYPE=2,
                 ACCESSIPADDRESS='172.21.29.13',
                 MONITOREDINSTID=2,
                 POLICYNAME='test_ospf_policy_1/test_ospf',
                 ALERTGROUP='ITNM Monitor',
                 MONITOREDENTITYID=150,
                 ENTITYMANAGED=3,
                 CHANGETIME='2024-05-07 04:37:18',
                 IFINDEX=44,
                 IFTYPESTRING='propVirtual',
                 IFNAME='Vl15',
                 IFDESCR='Vlan15',
                 IFALIAS='to shieldl3-ce6-cap12',
                 TEMPLATETYPE='Basic Threshold'
         }
}