Tellabs1150ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.1397.2.29]]></eventFormatRecognizer> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute> <setEventAttribute attr="eventSeverity">1</setEventAttribute> <setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/> <attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/> <attrKeyMap attr="intfName" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "/> <attrKeyMap attr="eventSeverity" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: "/> <attrKeyMap attr="eventDesc" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "/> <attrKeyMap attr="_Noidea" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: "/> </collectAndSetAttrByKeyValuePair> <choose> <when test='$eventDesc = "DYING-GASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$eventDesc = "GPON-RXPWR-LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> </choose> <!-- <choose> <when test='$_id = "1"'> <setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$_id = "2"'> <setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> </choose> --> <setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute> </parsingInstructions> 2017-09-13 12:03:14 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104052702) 12 days, 1:02:07.02 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:03:21 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104053498) 12 days, 1:02:14.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:04:53 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104062603) 12 days, 1:03:46.03 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:04:57 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104063004) 12 days, 1:03:50.04 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:08:07 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082058) 12 days, 1:07:00.58 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:08:11 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082498) 12 days, 1:07:04.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:09:47 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092087) 12 days, 1:08:40.87 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-09-13 12:09:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092513) 12 days, 1:08:45.13 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: ""MDS1-1-2-19"" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 2017-10-09 06:49:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (181339924) 20 days, 23:43:19.24 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-ESUA-1" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "LOPL-XCV" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1 Tellabs1150ANY<patternDefinitions> <pattern name="patEverything"><![CDATA[.*]]></pattern> </patternDefinitions> <eventFormatRecognizer><![CDATA[olan\s-\s(\d+)\s-\sBOM\s\D(ALARM|PLATFM|EXCEPT|INFO)]]></eventFormatRecognizer> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<hostName:gPatStr>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord>\s<status:gPatStr>:<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<hostName:gPatStr>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord><_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<reptDevIpAddr:gPatIpV4Dot>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord>.*:<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<reptDevIpAddr:gPatIpV4Dot>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord><_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <default> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </default> </switch> <when test="exist _year"> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> </when> <setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute> <when test="exist _sev"> <setEventAttribute attr="eventSeverity">$_sev</setEventAttribute> </when> <setEventAttribute attr="extEventRecvProto">Syslog</setEventAttribute> <when test='$errorString = "ALARM"'> <collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_body"> <attrKeyMap attr="intfName" key="AID"/> <attrKeyMap attr="alarm" key="SV"/> <attrKeyMap attr="eventDesc" key="PC"/> <attrKeyMap attr="actionTime" key="ET"/> <attrKeyMap attr="actionResult" key="DS"/> </collectFieldsByKeyValuePair> </when> <when test='$errorString = "PLATFM"'> <collectFieldsByRegex src="$_body"> <regex><![CDATA[<details:patEverything>,<_body1:gPatMesgBody>]]></regex> </collectFieldsByRegex> <collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_body1"> <attrKeyMap attr="serialNumber" key="s/n"/> </collectFieldsByKeyValuePair> </when> <when test='$errorString = "INFO"'> <collectFieldsByRegex src="$_body"> <regex><![CDATA[<details:patEverything>]]></regex> </collectFieldsByRegex> </when> <when test='$errorString = "EXCEPT"'> <collectFieldsByRegex src="$_body"> <regex><![CDATA[<details:patEverything>]]></regex> </collectFieldsByRegex> </when> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_Generic"</setEventAttribute> <when test="exist status"> <when test='$status = "SET"'> <choose> <when test='$eventDesc = "AIS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_AIS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PS-FAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-FAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PS-MISS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-MISS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ACPWR-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACPWR-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-OVERLOAD-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-OVERLOAD-ONT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-SD-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-SD-ONT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CLFAN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "COOLINGFANFAILURE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-DNAME"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-DNAME"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-MALF-CONF-DOC"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-MALF-CONF-DOC"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-NOT-AUTH"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-NOT-AUTH"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-SRV-RSPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-SRV-RSPFAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-TIMEOUT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-TIMEOUT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LPR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LPR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-OAML"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DHCP-SRV-INCMPLTRESP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-INCMPLTRESP"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DHCP-SRV-NORESP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-NORESP"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOA"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-CPE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-CPE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "GIGE-PHY-FAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_GIGE-PHY-FAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PON-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LACPGRPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LACPGRPFAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LCD"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LCD"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LWBATVG"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LWBATVG"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-1"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-1"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-2"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-2"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-3"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-3"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-4"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-4"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-5"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-5"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-6"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-6"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-7"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-7"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-8"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-8"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-9"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-9"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-10"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-10"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-11"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-11"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-12"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-12"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-13"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-13"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-14"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-14"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-15"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-15"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-16"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-16"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT-LAN-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LAN-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MOCA-LOL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LOL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MOCA-LTD-LNK"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LTD-LNK"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-RFV-OVLD"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-RFV-OVLD"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PWR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PWR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DYINGGASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_DG"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-SF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-SF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "REPLUNITMISS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLUNITMISS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-PEE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-PEE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MEA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MEA"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RING_CCMFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RING_CCMFAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_NOTPROV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTPROV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_MULTIPROV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_MULTIPROV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_NOTAVAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTAVAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SDF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SDF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SOFTWARE_PROCESSING_ERR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-CANNOT-AUTH"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-CANNOT-AUTH"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-DNAME"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-DNAME"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-SRV-RSPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-SRV-RSPFAIL"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-TIMEOUT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-TIMEOUT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "INTSFT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_INTSFT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SYNCLOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SYNCLOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-XCV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "EMSCOMMLOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_EMSCOMMLOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SWFTDWN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SWFTDWN"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-LOS-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-LOS-ONT"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VLAN-PROV-ERROR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VLAN-PROV-ERROR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$errReason = "REPLACEABLEUNITMISSING"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLACEABLEUNITMISSING"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SUBSCRIBER_LAN_LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SUBSCRIBER_LAN_LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOSSOFSIGNAL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOSSOFSIGNAL"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "ACCESS_VIOLATION"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACCESS_VIOLATION"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DYING-GASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "CONNECTIONESTABLISHMENTERROR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$eventDesc = "ONT_RXPWR_LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "GPON-RXPWR-LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> </choose> </when> <when test='$status = "CLR"'> <choose> <when test='$eventDesc = "REPLACEABLEUNITMISSING"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLACEABLEUNITMISSING-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "AIS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_AIS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PS-FAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-FAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PS-MISS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-MISS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ACPWR-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACPWR-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CONTCOM-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-OVERLOAD-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-OVERLOAD-ONT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-SD-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-SD-ONT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CLFAN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "COOLINGFANFAILURE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-DNAME"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-DNAME-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-MALF-CONF-DOC"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-MALF-CONF-DOC-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-NOT-AUTH"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-NOT-AUTH-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-SRV-RSPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-SRV-RSPFAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CSRV-RCV-TIMEOUT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-TIMEOUT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LPR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LPR-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-OAML-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DHCP-SRV-INCMPLTRESP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-INCMPLTRESP-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DHCP-SRV-NORESP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-NORESP-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOA-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-CPE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-CPE-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "GIGE-PHY-FAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_GIGE-PHY-FAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PON-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LACPGRPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LACPGRPFAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOF-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LCD"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LCD-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LWBATVG"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LWBATVG-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-1"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-1-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-2"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-2-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-3"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-3-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-4"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-4-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-5"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-5-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-6"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-6-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-7"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-7-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-8"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-8-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-9"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-9-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-10"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-10-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-11"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-11-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-12"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-12-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-13"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-13-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-14"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-14-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-15"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-15-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MISC-16"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-16-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT-LAN-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LAN-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MOCA-LOL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LOL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MOCA-LTD-LNK"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LTD-LNK-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-RFV-OVLD"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-RFV-OVLD-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "PWR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PWR-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "DYINGGASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL_DG"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-SF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-SF-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "REPLUNITMISS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLUNITMISS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-PEE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-PEE-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "MEA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MEA-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RING_CCMFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RING_CCMFAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_NOTPROV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTPROV-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_MULTIPROV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_MULTIPROV-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "RPI_NOTAVAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTAVAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SDF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SDF-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SOFTWARE_PROCESSING_ERR-CLR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-CANNOT-AUTH"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-CANNOT-AUTH-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-DNAME"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-DNAME-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-SRV-RSPFAIL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-SRV-RSPFAIL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SIPUA-REG-TIMEOUT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-TIMEOUT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "INTSFT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_INTSFT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SYNCLOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SYNCLOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-XCV-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "EMSCOMMLOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_EMSCOMMLOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SWFTDWN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SWFTDWN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VIDEO-LOS-ONT"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-LOS-ONT-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "VLAN-PROV-ERROR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VLAN-PROV-ERROR-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SUBSCRIBER_LAN_LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SUBSCRIBER_LAN_LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOSSOFSIGNAL"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOSSOFSIGNAL-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "ACCESS_VIOLATION"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACCESS_VIOLATION-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT_RXPWR_LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "DYING-GASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "CONNECTIONESTABLISHMENTERROR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "GPON-RXPWR-LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL_LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL_OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL_XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> </choose> </when> </when> </parsingInstructions> <4>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS SET:AID=MDS1-3-1-6 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:34 DS=<3>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS SET:AID=MDS1-3-1-22 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:23:34 DS=<6>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 030004 - BOM %PLATFM-INFO-ONTDEPART ONT MDS1-3-1-22 is no longer ranged on the PON, s/n=BFWS00015435<4>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS SET:AID=MDS1-3-1-22 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:34 DS=<4>1 2017-09-12T12:23:39-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS CLR:AID=MDS1-3-1-6 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:39 DS=<3>1 2017-09-12T12:24:19-04:00 127.0.0.1 olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS CLR:AID=MDS1-3-1-22 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:24:19 DS=<6>1 2017-09-12T12:24:23-04:00 AmtrakHQ olan - 030003 - BOM %PLATFM-INFO-ONTARRIVE ONT MDS1-3-1-22 accepted on the PON, s/n=BFWS00015435<4>1 2017-09-12T12:24:25-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS CLR:AID=MDS1-3-1-22 SV=MN PC=LOPL_LOS ET=09/12/2017 12:24:25 DS=<3>1 2017-09-12T12:25:43-04:00 AmtrakHQ olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS SET:AID=MDS1-5-2-3 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:25:43 DS=<6>1 2017-09-12T12:25:43-04:00 10.20.2.2 olan - 030004 - BOM %PLATFM-INFO-ONTDEPART ONT MDS1-5-2-3 is no longer ranged on the PON, s/n=BFWS00041929<4>1 2017-09-12T12:25:45-04:00 AmtrakHQ olan - 040033 - BOM %ALARM-WARN-LOPLLOF SET:AID=MDS1-5-2-3 SV=MN PC=LOPL_LOF ET=09/12/2017 12:25:45 DS=<190>1 2019-08-19T15:29:56-04:00 Wilmington olan - 009000 - BOM %INFO-INFO-INFO ***>>> Secure Download INITIATED <<<*** file=ONT729_015180.tgz<187>1 2019-08-19T15:30:00-04:00 AmtrakREA olan - 009003 - BOM %EXCEPT-ERROR-EXCEPT EsuUplinkPerfMonitor::svc - Detected clock change: Monotonic delta = 901, Wall time delta = 899<186>1 2019-08-19T15:30:47-04:00 Wilmington olan - 009002 - BOM %EXCEPT-CRIT-EXCEPT (1293943984) Failed to download secondary image for: MDS1-1-1-1-MDU. Image NOT autodownloaded<185>1 2019-08-19T15:30:47-04:00 Wilmington olan - 009001 - BOM %EXCEPT-ALERT-EXCEPT **Error** Download Failed. GET operation Failed.... Error Reason: 107VoltserverMGT500ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.43522]]></eventFormatRecognizer> <testEvents> <testEvent><![CDATA[]]></testEvent> </testEvents> <patternDefinitions> <pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern> <pattern name="patStrColon"><![CDATA[[^:]*]]></pattern> </patternDefinitions> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>\s+<_id:gPatStr>\s+ Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*<_id:gPatStr>.*Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> <collectFieldsByRegex src="$hostName"> <regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <when test='matches($_reptIp, "^\w+:")'> <collectFieldsByRegex src="$_reptIp"> <regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex> </collectFieldsByRegex> </when> <when test='$_reptIp != "127.0.0.1"'> <when test='$_reptIp != "0.0.0.0"'> <setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute> </when> </when> <setEventAttribute attr="_mgtStatus">null</setEventAttribute> <setEventAttribute attr="_majorStatus">null</setEventAttribute> <setEventAttribute attr="_chassisID">null</setEventAttribute> <setEventAttribute attr="_serialNo">null</setEventAttribute> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="_mgtStatus" key="SNMPv2-SMI::enterprises.43522.1.2.1.1.7" /> <attrKeyMap attr="_chassisID" key="SNMPv2-SMI::enterprises.43522.1.2.1.2.5" /> <attrKeyMap attr="_serialNo" key="SNMPv2-SMI::enterprises.43522.1.2.1.3.1.2" /> <attrKeyMap attr="_majorStatus" key="SNMPv2-SMI::enterprises.43522.1.2.1.3.1.3" /> <attrKeyMap attr="srcMACAddr" key="IF-MIB::ifPhysAddress.1 = STRING:" /> </collectAndSetAttrByKeyValuePair> <when test="$_majorStatus != null"> <collectFieldsByRegex src="$_majorStatus"> <regex><![CDATA[<devPort:gPatInt>.*Gauge32: <incidentStatus:gPatInt>]]></regex> </collectFieldsByRegex> </when> <when test="$_mgtStatus != null"> <collectFieldsByRegex src="$_mgtStatus"> <regex><![CDATA[<devPort:gPatInt>.*Gauge32: <incidentStatus:gPatInt>]]></regex> </collectFieldsByRegex> </when> <when test="$_chassisID != null"> <collectFieldsByRegex src="$_chassisID"> <regex><![CDATA[<:gPatInt>.*STRING: \"<hwComponentName:gPatStr>\"]]></regex> </collectFieldsByRegex> </when> <when test="$_serialNo != null"> <collectFieldsByRegex src="$_serialNo"> <regex><![CDATA[<:gPatInt>.*STRING: \"<serialNumber:gPatStr>]]></regex> </collectFieldsByRegex> </when> <setEventAttribute attr="eventType">voltserverMGT500-txCardFaultAlarm</setEventAttribute> <choose> <when test="$_idsev = 2"> <setEventAttribute attr="eventType">voltserverMGT500-mgtFaultAlarm</setEventAttribute> </when> <when test="$_idsev = 1"> <setEventAttribute attr="eventType">voltserverMGT500-txCardFaultAlarm</setEventAttribute> </when> </choose> </parsingInstructions> 2019-06-17 12:44:16 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (87057425) 10 days, 1:49:34.25 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.43522.1.2 SNMPv2-SMI::enterprises.43522.1.2.1.3.1.2.18 = STRING: "\"3200100754\" " SNMPv2-SMI::enterprises.43522.1.2.1.3.1.3.18 = Gauge32: 520 SNMPv2-SMI::enterprises.43522.1.2.1.2.5.0 = STRING: "\"1200000346\" " SNMPv2-SMI::enterprises.816 = STRING: "0:80:a3:ba:da:f9"BuffaloTerristationANY<patternDefinitions> <pattern name="patStrRightParenthesis"> <![CDATA[[^\)]*]]> </pattern> <pattern name="patStrColon"> <![CDATA[[^:]*]]> </pattern> </patternDefinitions> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex> <![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpV4Dot>\(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex> <![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> <:gPatStr> \(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <when test='matches($_reptIp, "^\w+:")'> <collectFieldsByRegex src="$_reptIp"> <regex> <![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </when> <when test='$_reptIp != "127.0.0.1"'> <when test='$_reptIp != "0.0.0.0"'> <setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute> </when> </when> <collectAndSetAttrByKeyValuePair src="$_body" sep="\t\\| SNMP"> <attrKeyMap attr="_id" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/> <attrKeyMap attr="_nasErrorMsg" key="SNMPv2-SMI::enterprises.5227.27.1.4.1.2"/> <attrKeyMap attr="_nasErrorDate" key="SNMPv2-SMI::enterprises.5227.27.1.4.1.3"/> <attrKeyMap attr="_nasInformationMsg" key="SNMPv2-SMI::enterprises.5227.27.1.5.1.2"/> <attrKeyMap attr="_nasInformationDate" key="SNMPv2-SMI::enterprises.5227.27.1.5.1.3"/> </collectAndSetAttrByKeyValuePair> <choose> <when test='$_id = "SNMPv2-SMI::enterprises.5227.27.2.1"'> <setEventAttribute attr="eventType">Buffalo-Storage-nasErrorOccur</setEventAttribute> </when> <when test='$_id = "SNMPv2-SMI::enterprises.5227.27.2.2"'> <setEventAttribute attr="eventType">Buffalo-Storage-nasInformationOccur</setEventAttribute> </when> </choose> </parsingInstructions>2018-04-17 12:11:29 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (1084987088) 125 days, 13:51:10.88 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.5227.27.2.2 SNMPv2-SMI::enterprises.5227.27.1.5.1.2.1 = STRING: "I52:new_fw_available_info" SNMPv2-SMI::enterprises.5227.27.1.5.1.3.1 = STRING: "2018/01/16 08:53:21" Tellabs1150ANY<eventFormatRecognizer><![CDATA[iso.0.8802]]></eventFormatRecognizer> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute> <setEventAttribute attr="eventSeverity">1</setEventAttribute> <setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/> <attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/> <attrKeyMap attr="lldpStatsRemTablesInserts" key="iso.0.8802.1.1.2.1.2.2.0 = Gauge32: "/> <attrKeyMap attr="lldpStatsRemTablesDeletes" key="iso.0.8802.1.1.2.1.2.3.0 = Gauge32: "/> <attrKeyMap attr="lldpStatsRemTablesDrops" key="iso.0.8802.1.1.2.1.2.4.0 = Gauge32: "/> <attrKeyMap attr="lldpStatsRemTablesAgeouts" key="iso.0.8802.1.1.2.1.2.5.0 = Gauge32: "/> </collectAndSetAttrByKeyValuePair> <setEventAttribute attr="eventType">"Tellabs_LLDP_Generic"</setEventAttribute> <setEventAttribute attr="eventSeverity">1</setEventAttribute> <!-- <choose> <when test='$_id = "1"'> <setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$_id = "2"'> <setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> </choose> --> <setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute> </parsingInstructions> 2018-07-10 04:53:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (521810183) 60 days, 9:28:21.83 SNMPv2-MIB::snmpTrapOID.0 = OID: iso.0.8802.1.1.2.0.0.1 iso.0.8802.1.1.2.1.2.2.0 = Gauge32: 45374 iso.0.8802.1.1.2.1.2.3.0 = Gauge32: 3866 iso.0.8802.1.1.2.1.2.4.0 = Gauge32: 0 iso.0.8802.1.1.2.1.2.5.0 = Gauge32: 1754Tellabs1150ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.1397.2.29]]></eventFormatRecognizer> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex> <![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]> </regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute> <setEventAttribute attr="eventSeverity">1</setEventAttribute> <setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/> <attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/> <attrKeyMap attr="intfName" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "/> <attrKeyMap attr="_eventSev" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: "/> <attrKeyMap attr="eventDesc" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "/> <attrKeyMap attr="_Noidea" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: "/> </collectAndSetAttrByKeyValuePair> <choose> <when test="$_eventSev != 4"> <choose> <when test='$eventDesc = "DYING-GASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$eventDesc = "GPON-RXPWR-LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "SW-PROC-ERR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "CLFAN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$eventDesc = "LOPL-XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> </choose> </when> <when test="$_eventSev = 4"> <choose> <when test='$eventDesc = "DYING-GASP"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "CONTCOM"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "GPON-RXPWR-LOW"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOS"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOF"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL-LOA"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL-OAML"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "SW-PROC-ERR"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "CLFAN"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> <when test='$eventDesc = "LOPL-XCV"'> <setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV-CLR"</setEventAttribute> <setEventAttribute attr="eventSeverity">0</setEventAttribute> </when> </choose> </when> </choose> <!-- <choose> <when test='$_id = "1"'> <setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$_id = "2"'> <setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> </choose> --> <setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute> </parsingInstructions> 2017-09-13 12:03:14 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104052702) 12 days, 1:02:07.02 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:03:21 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104053498) 12 days, 1:02:14.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:04:53 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104062603) 12 days, 1:03:46.03 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:04:57 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104063004) 12 days, 1:03:50.04 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:08:07 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082058) 12 days, 1:07:00.58 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:08:11 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082498) 12 days, 1:07:04.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:09:47 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092087) 12 days, 1:08:40.87 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:09:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092513) 12 days, 1:08:45.13 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: ""MDS1-1-2-19"" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-10-09 06:49:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (181339924) 20 days, 23:43:19.24 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-ESUA-1" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "LOPL-XCV" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1AppnetaAppnetaANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.19041]]></eventFormatRecognizer> <testEvents> <testEvent><![CDATA[]]></testEvent> </testEvents> <patternDefinitions> <pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern> <pattern name="patStrColon"><![CDATA[[^:]*]]></pattern> </patternDefinitions> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>.* Cold Start Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*Cold Start Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> <collectFieldsByRegex src="$hostName"> <regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <when test='matches($_reptIp, "^\w+:")'> <collectFieldsByRegex src="$_reptIp"> <regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex> </collectFieldsByRegex> </when> <when test='$_reptIp != "127.0.0.1"'> <when test='$_reptIp != "0.0.0.0"'> <setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute> </when> </when> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: " /> <attrKeyMap attr="eventDetails" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: " /> <attrKeyMap attr="eventId" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: " /> <attrKeyMap attr="eventTime" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: " /> <attrKeyMap attr="eventTypeNis" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: " /> <attrKeyMap attr="monitoringPointIp" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: " /> <attrKeyMap attr="monitoringPointName" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: " /> <attrKeyMap attr="monitoringPointStatus" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.2.0 = INTEGER: " /> <attrKeyMap attr="pathGroupId" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: " /> <attrKeyMap attr="pathGroupName" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: " /> <attrKeyMap attr="pathEventDeliveryTime" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: " /> <attrKeyMap attr="pathId" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: " /> <attrKeyMap attr="pathName" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: " /> <attrKeyMap attr="pathDesc" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: " /> <attrKeyMap attr="pathTargetType" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: " /> <attrKeyMap attr="sqMeasuredParameter" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: " /> <attrKeyMap attr="sqMeasuredValue" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = INTEGER: " /> <attrKeyMap attr="sqParameterState" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: " /> <attrKeyMap attr="sqPathServiceQuality" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: " /> <attrKeyMap attr="sqSqdName" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: " /> <attrKeyMap attr="testId" key="SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = STRING: " /> <attrKeyMap attr="webMonitorId" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.1.0 = STRING: " /> <attrKeyMap attr="webAppName" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.2.0 = STRING: " /> <attrKeyMap attr="webMilestoneName" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.3.0 = STRING: " /> <attrKeyMap attr="webUrl" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.4.0 = STRING: " /> <attrKeyMap attr="webMonitorDeepLink" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.5.0 = STRING: " /> </collectAndSetAttrByKeyValuePair> <setEventAttribute attr="eventType">Appneta-NewTrapType</setEventAttribute> <choose> <when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.53"'> <setEventAttribute attr="eventType">Appneta-apnMonitoringPointEvent</setEventAttribute> </when> <when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.50"'> <setEventAttribute attr="eventType">Appneta-apnSqEvent</setEventAttribute> </when> <when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.54"'> <setEventAttribute attr="eventType">Appneta-apnWebSqEvent</setEventAttribute> </when> </choose> </parsingInstructions> 2019-02-11 11:10:53 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14608908) 1 day, 16:34:49.08 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Measured Data Loss (1.4300%) violates condition Data Loss > 0 %" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710921" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:09:34 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 0 SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: 4037 SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: "SkypeMonitoring" SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: "2019-02-11 16:10:53 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14684 SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: "Appneta-Test <-> Skype (single)" SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: "Ashburn <-> -" SNMPv2-SMI::enterprises.19041.2.1.5.3.4.0 = STRING: "13.107.8.2" SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: "Auto" SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "1.43" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Voice Server" SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = INTEGER: -1 2019-02-11 11:12:23 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14617908) 1 day, 16:36:19.08 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Overall Total Time > 8000 ms has violated (measured: 9854ms)" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710926" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:11:36 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 4 SNMPv2-SMI::enterprises.19041.2.1.5.8.1.0 = INTEGER: 11702 SNMPv2-SMI::enterprises.19041.2.1.5.8.2.0 = STRING: "Office365" SNMPv2-SMI::enterprises.19041.2.1.5.8.3.0 = STRING: "Overall" SNMPv2-SMI::enterprises.19041.2.1.5.8.4.0 = STRING: "https://login.microsoftonline.com" SNMPv2-SMI::enterprises.19041.2.1.5.8.5.0 = STRING: "https://app-11.pm.appneta.com/pvc/webpath/webpathdetail.html?webpathid=11702&activeTab=7&st=17147" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14681 SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 34 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "9854.0" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Office365 (Always)" 2019-02-11 11:14:53 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14632917) 1 day, 16:38:49.17 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Measured Data Loss (0.0000%) clears condition Data Loss > 0 %" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710921" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:13:26 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 0 SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: 4037 SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: "SkypeMonitoring" SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: "2019-02-11 16:14:53 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14684 SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: "Appneta-Test <-> Skype (single)" SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: "Ashburn <-> -" SNMPv2-SMI::enterprises.19041.2.1.5.3.4.0 = STRING: "13.107.8.2" SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: "Auto" SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "0.0" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 10 SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: 10 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Voice Server" SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = INTEGER: -1GenericGenericANY<patternDefinitions> <pattern name="patStrEndColon"><![CDATA[[^:]*]]></pattern> <pattern name="patStrDoubleQuoted"><![CDATA[[^"]*]]></pattern> </patternDefinitions> <eventFormatRecognizer><![CDATA[.*thousandeyes:.*]]></eventFormatRecognizer> <parsingInstructions> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<:gPatSyslogPRI>?<_mon:gPatMon>\s+<_day:gPatDay>\s+<_time:gPatTime><_securityType:patStrEndColon>:\s*<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> <collectAndSetAttrByJSON src="$_body"> <attrKeyMap attr="TE_Agent" key="alert.agents"/> <attrKeyMap attr="TE_AlertId" key="alert.alertId"/> <attrKeyMap attr="TE_ApiLink" key="alert.apiLinks"/> <attrKeyMap attr="TE_EndDate" key="alert.dateEnd"/> <attrKeyMap attr="TE_StartDate" key="alert.dateStart"/> <attrKeyMap attr="TE_Monitor" key="alert.monitors"/> <attrKeyMap attr="TE_Permalink" key="alert.permalink"/> <attrKeyMap attr="TE_ruleExpression" key="alert.ruleExpression"/> <attrKeyMap attr="TE_ruleId" key="alert.ruleId"/> <attrKeyMap attr="eventName" key="alert.ruleName"/> <attrKeyMap attr="TE_testID" key="alert.testId"/> <attrKeyMap attr="TE_testName" key="alert.testName"/> <attrKeyMap attr="TE_type" key="alert.type"/> <attrKeyMap attr="eventId" key="eventId"/> <attrKeyMap attr="_eventType" key="eventType"/> <attrKeyMap attr="TE_AlertAgent" key="agentAlert"/> <attrKeyMap attr="TE_ruleId" key="agentAlert.agentRuleID"/> <attrKeyMap attr="TE_AgentNotificationId" key="agentAlert.agentNotificationId"/> <attrKeyMap attr="TE_AgentHostanme" key="agentAlert.hostanme"/> <attrKeyMap attr="TE_AgentName" key="agentAlert.agentName"/> <attrKeyMap attr="TE_AgentIpAddress" key="agentAlert.ipAddress"/> <attrKeyMap attr="TE_Active" key="agentAlert.active"/> <attrKeyMap attr="TE_EndDate" key="agentAlert.dateEnd"/> <attrKeyMap attr="TE_StartDate" key="agentAlert.dateStart"/> <attrKeyMap attr="TE_ruleExpression" key="agentAlert.ruleExpression"/> <attrKeyMap attr="eventName" key="agentAlert.ruleName"/> <attrKeyMap attr="TE_StartMetrics" key="agentAlert.metricAtStart"/> <attrKeyMap attr="TE_EndMetrics" key="agentAlert.metricsAtEnd"/> </collectAndSetAttrByJSON> <setEventAttribute attr="eventType">combineMsgId("ThousandEyes-",$_eventType)</setEventAttribute> <setEventAttribute attr="eventTime">toDateTime($_mon, $_day, $_time )</setEventAttribute> <when test='$_securityType = "alert"'> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$phCustId = "1"'> <setEventAttribute attr="srcIpAddr">192.168.220.70</setEventAttribute> </when> <when test='$phCustId = "2009"'> <setEventAttribute attr="srcIpAddr">172.20.7.80</setEventAttribute> </when> <when test='$phCustId = "2011"'> <setEventAttribute attr="srcIpAddr">192.168.225.81</setEventAttribute> </when> </parsingInstructions> <5>Mar 22 10:25:55 thousandeyes: {"alert":{"agents":[{"active":0,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-21 16:25:34","metricsAtEnd":"Page Load has error: false","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=80688"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-21 16:25:33","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=75669"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-21 16:25:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=75675"}],"alertId":23576070,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887749","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887749","rel":"data"}],"dateEnd":"2019-03-22 14:10:46","dateStart":"2019-03-21 16:25:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406410-23576070","eventType":"ALERT_NOTIFICATION_CLEAR"} <5>Mar 22 10:30:44 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 14:15:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=80688"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 14:15:36","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=75675"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 14:15:35","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=75669"}],"alertId":23598437,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887749","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887749","rel":"data"}],"dateStart":"2019-03-22 14:15:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406890-23598437","eventType":"ALERT_NOTIFICATION_TRIGGER"} <5>Mar 22 12:40:42 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 04:40:38","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=75675"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 04:40:37","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=75669"},{"active":0,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 04:40:12","metricsAtEnd":"Page Load has error: false","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=80688"}],"alertId":23587842,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887755","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887755","rel":"data"}],"dateEnd":"2019-03-22 16:40:17","dateStart":"2019-03-22 04:40:38","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887755,"testName":"General Page with Video","type":"Page Load","violationCount":3},"eventId":"54417627-23587842","eventType":"ALERT_NOTIFICATION_CLEAR"} <5>Mar 22 12:47:27 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 16:45:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=75669"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 16:45:36","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=75675"},{"active":1,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 16:45:08","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=80688"}],"alertId":23601427,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887755","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887755","rel":"data"}],"dateStart":"2019-03-22 16:45:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887755,"testName":"General Page with Video","type":"Page Load","violationCount":3},"eventId":"54418005-23601427","eventType":"ALERT_NOTIFICATION_TRIGGER"}<5>Mar 28 10:47:41 thousandeyes: {"agentAlert":{"active":2,"agentId":80697,"agentName":"chicago-nuc","agentNotificationId":23753652,"agentRuleId":219720,"dateEnd":1553784460,"dateStart":1553782671,"hostname":"chicago-nuc","ipAddress":"10.132.129.211","metricsAtEnd":"N/A (notification rule modified or removed from agent)","metricsAtStart":"Last Contact: 22,981 minutes ago","ruleExpression":"Last Contact = 3 minutes ago","ruleName":"NUCs Reachability"},"eventId":"1363485-23753652","eventType":"AGENT_ALERT_NOTIFICATION_CLEAR"}<5>Mar 29 15:12:52 thousandeyes: {"agentAlert":{"active":1,"agentId":80697,"agentName":"chicago-nuc","agentNotificationId":23787390,"agentRuleId":219720,"dateStart":1553886772,"hostname":"chicago-nuc","ipAddress":"10.132.129.211","metricsAtEnd":"","metricsAtStart":"Last Contact: 24,716 minutes ago","ruleExpression":"Last Contact = 3 minutes ago","ruleName":"NUCs Reachability"},"eventId":"1364976-23787390","eventType":"AGENT_ALERT_NOTIFICATION_TRIGGER"} <5>Aug 5 10:13:22 thousandeyes: {"alert":{"alertId":27471920,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/880007","rel":"related"},{"href":"https://api.thousandeyes.com/v4/net/bgp-metrics/880007","rel":"data"}],"dateEnd":"2019-08-04 05:01:05","dateStart":"2019-08-02 23:30:00","monitors":[{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":57,"monitorName":"St. Petersburg-1 - Obit (AS 8492)","network":"Obit Telecommunications, St.Petersburg, Russia (AS 8492)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=57","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":74,"monitorName":"London-9 - Global Crossing (AS 3549)","network":"Level 3 Communications, Inc. (AS 3549)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=74","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":14,"monitorName":"Amsterdam-2 - KPN (AS 286)","network":"KPN (AS 286)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=14","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":83,"monitorName":"San Francisco, CA - Savvis (AS 3561)","network":"Savvis (AS 3561)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=83","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":51,"monitorName":"Tokyo-2 - M-Root (AS 7500)","network":"WIDE Project (AS 7500)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=51","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":75,"monitorName":"Tokyo-4 - IIJ (AS 2497)","network":"IIJ Internet Initiative Japan Inc. (AS 2497)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=75","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":1928,"monitorName":"San Jose, CA-6 - HostVirtual (AS 36236)","network":"VR HOSTED (AS 36236)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=1928","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":208,"monitorName":"Portland, OR - State of Oregon (AS 1798)","network":"State of Oregon (AS 1798)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=208","prefix":"52.84.232.0/22"}], "dateEnd":"2019-03-22 14:10:46","dateStart":"2019-03-21 16:25:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406410-23576070","eventType":"ALERT_NOTIFICATION_CLEAR"}GenericUnixANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.2020]]></eventFormatRecognizer> <testEvents> <testEvent><![CDATA[]]></testEvent> </testEvents> <patternDefinitions> <pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern> <pattern name="patStrColon"><![CDATA[[^:]*]]></pattern> </patternDefinitions> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>.* Cold Start Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*Cold Start Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> <collectFieldsByRegex src="$hostName"> <regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <when test='matches($_reptIp, "^\w+:")'> <collectFieldsByRegex src="$_reptIp"> <regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex> </collectFieldsByRegex> </when> <when test='$_reptIp != "127.0.0.1"'> <when test='$_reptIp != "0.0.0.0"'> <setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute> </when> </when> <collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body"> <attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: " /> <attrKeyMap attr="eventDetails" key="SNMPv2-SMI::enterprises.2020.1.0 = STRING: " /> <attrKeyMap attr="eventId" key="SNMPv2-SMI::enterprises.2020.2.0 = STRING: " /> <attrKeyMap attr="eventTime" key="SNMPv2-SMI::enterprises.2020.3.0 = STRING: " /> <attrKeyMap attr="hostIpAddr" key="SNMPv2-SMI::enterprises.2020.101.1.0 = STRING: " /> <attrKeyMap attr="hostName" key="SNMPv2-SMI::enterprises.2020.101.3.0 = STRING: " /> <attrKeyMap attr="severity" key="SNMPv2-SMI::enterprises.2020.101.4.0 = STRING: " /> <attrKeyMap attr="status" key="SNMPv2-SMI::enterprises.2020.101.2.0 = STRING: " /> </collectAndSetAttrByKeyValuePair> <setEventAttribute attr="eventType">Pandora-PingUp</setEventAttribute> <when test='$status = "New"'> <setEventAttribute attr="eventType">Pandora-PingDown</setEventAttribute> </when> <when test='$status = "Clear"'> <setEventAttribute attr="eventType">Pandora-PingUp</setEventAttribute> </when> </parsingInstructions> 2019-05-03 13:33:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.2020.101 SNMPv2-SMI::enterprises.2020.101.1.0 = STRING: "192.168.220.240" SNMPv2-SMI::enterprises.2020.101.2.0 = STRING: "New" SNMPv2-SMI::enterprises.2020.101.3.0 = STRING: "192.168.220.240" SNMPv2-SMI::enterprises.2020.101.4.0 = STRING: "Critical" CiscoMeraki FirewallANY<patternDefinitions> <pattern name="patMerakiMod"><![CDATA[ip_flow]]></pattern> </patternDefinitions> <eventFormatRecognizer><![CDATA[(?:<:gPatMon>\s+<:gPatDay>\s+<:gPatTime>\s+<:gPatIpAddr>\s+|<:gPatSyslogPRI>)\d\s+\d+\.\d+\s+<:patMerakiMod>]]></eventFormatRecognizer> <parsingInstructions> <switch> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<_mon:gPatMon>\s+<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpAddr>\s+\d+\s+\d+\.\d+\s+<:gPatStr>\s+<_type:gPatStr>\s+<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_rawmsg"> <regex><![CDATA[<:gPatSyslogPRI>\d\s+\d+\.\d+\s+<:gPatStr>\s+<_type:gPatStr>\s+<_body:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> </switch> <setEventAttribute attr="eventType">Cisco-Meraki-Generic</setEventAttribute> <collectAndSetAttrByKeyValuePair sep=" " src="$_body"> <attrKeyMap attr="_src" key="src="/> <attrKeyMap attr="srcIpPort" key="sport="/> <attrKeyMap attr="_dst" key="dst="/> <attrKeyMap attr="destIpPort" key="dport="/> <attrKeyMap attr="_mac" key="dhost="/> <attrKeyMap attr="_mac" key="mac="/> <attrKeyMap attr="_proto" key="protocol="/> <attrKeyMap attr="_sig" key="signature="/> <attrKeyMap attr="_severity" key="priority="/> <attrKeyMap attr="_actionType" key="type="/> <attrKeyMap attr="hostMACAddr" key="device="/> <attrKeyMap attr="srcMACAddr" key="client_mac="/> <attrKeyMap attr="_src" key="client_ip="/> <attrKeyMap attr="wlanRadioId" key="radio="/> <attrKeyMap attr="wlanChannelId" key="channel="/> <attrKeyMap attr="durationMSec" key="duration="/> <attrKeyMap attr="operationalState" key="state="/> <attrKeyMap attr="msg" key="info="/> <attrKeyMap attr="_isBadEntry" key="bad_entry="/> <attrKeyMap attr="alarm" key="alarm_id="/> <attrKeyMap attr="_src" key="ip_src="/> <attrKeyMap attr="arpSrcIpAddr" key="arp_src="/> <attrKeyMap attr="dnsServer" key="dns_server="/> <attrKeyMap attr="_src" key="dhcp_ip="/> <attrKeyMap attr="dhcpGateway" key="dhcp_server="/> <attrKeyMap attr="dhcpServerMacAddr" key="dhcp_server_mac="/> </collectAndSetAttrByKeyValuePair> <when test="exist _actionType"> <setEventAttribute attr="eventType">combineMsgId("Cisco-Meraki-", $_actionType)</setEventAttribute> <setEventAttribute attr="eventType">replaceStrInStr($eventType, "_", "-")</setEventAttribute> </when> <choose> <when test='$_type = "urls"'> <switch> <case> <collectFieldsByRegex src="$_body"> <regex><![CDATA[request: <httpMethod:gPatWord> <infoURL:gPatStr>]]></regex> </collectFieldsByRegex> <setEventAttribute attr="eventType">Cisco-Meraki-WebTraffic-Permit</setEventAttribute> <when test="exist infoURL"> <setEventAttribute attr="destName">extractHostFromURL($infoURL)</setEventAttribute> </when> </case> <default/> </switch> </when> <when test='$_type = "flows"'> <choose> <when test='matches($_body, "\ballow\b")'> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute> </when> <otherwise> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute> </otherwise> </choose> <setEventAttribute attr="phEventCategory">4</setEventAttribute> </when> <when test='$_type = "security_event"'> <choose> <when test='matches($_body, "\ballow\b")'> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute> </when> <otherwise> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute> </otherwise> </choose> <setEventAttribute attr="phEventCategory">4</setEventAttribute> </when> <when test='$_type = "airmarsahl_events"'> <choose> <when test='matches($_body, "\ballow\b")'> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute> </when> <otherwise> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute> </otherwise> </choose> <setEventAttribute attr="phEventCategory">4</setEventAttribute> </when> <when test='$_type = "ids-alerts"'> <switch> <case> <collectFieldsByRegex src="$_sig"> <regex><![CDATA[\d+:<_et:gPatInt>:\d+]]></regex> </collectFieldsByRegex> <setEventAttribute attr="eventType">combineMsgId("Snort-", $_et)</setEventAttribute> </case> <default/> </switch> <switch> <case> <collectFieldsByRegex src="$_body"> <regex><![CDATA[message:\s+<msg:gPatMesgBody>]]></regex> </collectFieldsByRegex> </case> <default/> </switch> <choose> <when test='$_severity = "1"'> <setEventAttribute attr="eventSeverity">10</setEventAttribute> </when> <when test='$_severity = "2"'> <setEventAttribute attr="eventSeverity">9</setEventAttribute> </when> <when test='$_severity = "3"'> <setEventAttribute attr="eventSeverity">8</setEventAttribute> </when> <when test='$_severity = "4"'> <setEventAttribute attr="eventSeverity">7</setEventAttribute> </when> <when test='$_severity = "5"'> <setEventAttribute attr="eventSeverity">6</setEventAttribute> </when> <when test='$_severity = "6"'> <setEventAttribute attr="eventSeverity">5</setEventAttribute> </when> <when test='$_severity = "7"'> <setEventAttribute attr="eventSeverity">4</setEventAttribute> </when> <when test='$_severity = "8"'> <setEventAttribute attr="eventSeverity">3</setEventAttribute> </when> <when test='$_severity = "9"'> <setEventAttribute attr="eventSeverity">2</setEventAttribute> </when> <otherwise> <setEventAttribute attr="eventSeverity">1</setEventAttribute> </otherwise> </choose> </when> <when test='$_type = "events"'> <switch> <case> <collectFieldsByRegex src="$_body"> <regex><![CDATA[dhcp lease of ip <srcIpAddr:gPatIpAddr> from server mac <_destMAC:gPatStr> for client mac <_srcMAC:gPatStr> from router <destIpAddr:gPatIpAddr> on subnet <dhcpSubnetAddr:gPatIpAddr> with dns <dnsServer:gPatIpAddr>]]></regex> </collectFieldsByRegex> <setEventAttribute attr="eventType">Cisco-Meraki-Events-dhcp-lease-extended</setEventAttribute> <setEventAttribute attr="srcMACAddr">normalizeMAC($_srcMAC)</setEventAttribute> <setEventAttribute attr="destMACAddr">normalizeMAC($_destMAC)</setEventAttribute> </case> <case> <collectFieldsByRegex src="$_body"> <regex><![CDATA[Site-to-site\s+VPN:\s*<:gPatStr>\s+negotiation\s+failed\s+due\s+to\s+time\s+up]]></regex> </collectFieldsByRegex> <setEventAttribute attr="eventType">Cisco-Meraki-Events-VPN-negotiation-time-up</setEventAttribute> </case> <case> <collectFieldsByRegex src="$_body"> <regex><![CDATA[^content_filtering_block\s+<_fields:gPatMesgBody>]]></regex> </collectFieldsByRegex> <setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute> <collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_fields"> <attrKeyMap attr="infoURL" key="url"/> <attrKeyMap attr="threatCategory" key="category0"/> <attrKeyMap attr="_server" key="server"/> </collectFieldsByKeyValuePair> <when test="exist _server"> <switch> <case> <collectFieldsByRegex src="$_server"> <regex><![CDATA[^<destIpAddr:gPatIpAddr>(?::<destIpPort:gPatInt>)?$]]></regex> </collectFieldsByRegex> </case> <default> <setEventAttribute attr="destName">$_server</setEventAttribute> </default> </switch> </when> </case> <default/> </switch> </when> </choose> <when test="exist _mac"> <setEventAttribute attr="hostMACAddr">normalizeMAC($_mac)</setEventAttribute> </when> <when test="exist _proto"> <switch> <case> <collectFieldsByRegex src="$_proto"> <regex><![CDATA[^<ipProto:gPatInt>$]]></regex> </collectFieldsByRegex> </case> <default> <setEventAttribute attr="ipProto">convertStrToIntIpProto($_proto)</setEventAttribute> </default> </switch> </when> <when test="exist _src"> <switch> <case> <collectFieldsByRegex src="$_src"> <regex><![CDATA[<srcIpAddr:gPatIpAddr>:<srcIpPort:gPatInt>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_src"> <regex><![CDATA[<srcIpAddr:gPatIpAddr>]]></regex> </collectFieldsByRegex> </case> </switch> </when> <when test="exist _dst"> <switch> <case> <collectFieldsByRegex src="$_dst"> <regex><![CDATA[<destIpAddr:gPatIpAddr>:<destIpPort:gPatInt>]]></regex> </collectFieldsByRegex> </case> <case> <collectFieldsByRegex src="$_dst"> <regex><![CDATA[<destIpAddr:gPatIpAddr>]]></regex> </collectFieldsByRegex> </case> </switch> </when> <when test="exist _isBadEntry"> <choose> <when test="exist operationalState"/> <when test='$_isBadEntry = "false"'> <setEventAttribute attr="operationalState">true</setEventAttribute> </when> <when test='$_isBadEntry = "true"'> <setEventAttribute attr="operationalState">false</setEventAttribute> </when> </choose> </when> </parsingInstructions> <134>1 1566237426.948970759 ip_flow_end src=172.16.3.252 dst=216.239.36.144 protocol=tcp sport=47287 dport=5061 translated_src_ip=10.242.252.54 translated_port=47287<134>1 1566237426.062588166 ip_flow_start src=172.16.6.153 dst=8.8.8.8 protocol=udp sport=57708 dport=53 translated_src_ip=10.242.254.6 translated_port=57708ZhonesMXK-F1419ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.5504]]></eventFormatRecognizer> <patternDefinitions><pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern><pattern name="patStrColon"><![CDATA[[^:]*]]></pattern></patternDefinitions><parsingInstructions> <switch><case><collectFieldsByRegex src="$_rawmsg"><regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpV4Dot>\(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]></regex></collectFieldsByRegex></case><case><collectFieldsByRegex src="$_rawmsg"><regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> <:gPatStr> \(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]></regex></collectFieldsByRegex></case></switch><setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute> <when test='matches($_reptIp, "^\w+:")'><collectFieldsByRegex src="$_reptIp"><regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex></collectFieldsByRegex></when><when test='$_reptIp != "127.0.0.1"'><when test='$_reptIp != "0.0.0.0"'><setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute></when></when> <collectAndSetAttrByKeyValuePair sep='\t\\| SNMP' src="$_body"> <attrKeyMap attr="_id" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/> <attrKeyMap attr="_zhoneGponOltOpticAlarms" key="SNMPv2-SMI::enterprises.5504.5.14.1.20.1.6"/> <attrKeyMap attr="_zhoneGponOltStatusWord" key="SNMPv2-SMI::enterprises.5504.5.14.1.20.1.7"/> <attrKeyMap attr="_zhoneGponOmciOnuAlarmsText" key="SNMPv2-SMI::enterprises.5504.5.14.1.11.1.1"/> <attrKeyMap attr="_zhoneOnuOmciImageUpgradeDownloadStatus" key="SNMPv2-SMI::enterprises.5504.5.14.1.19.1.12"/> <attrKeyMap attr="_zhoneGponSerialNoVendorId" key="SNMPv2-SMI::enterprises.5504.5.14.1.5.1.3"/> <attrKeyMap attr="_zhoneGponSerialNoVendorSpecific" key="SNMPv2-SMI::enterprises.5504.5.14.1.5.1.4"/> <attrKeyMap attr="_zhoneGponOltOnuConfigModel" key="SNMPv2-SMI::enterprises.5504.5.14.1.2.1.19"/> <attrKeyMap attr="_zhoneGponOnuStatusWord" key="SNMPv2-SMI::enterprises.5504.5.14.1.7.1.1"/> </collectAndSetAttrByKeyValuePair> <choose> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.6"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOltOpticsAlarmsTrap</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.10"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOltStatusWordTrap</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.4"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOmciOnuAlarmsTrap</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.5"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOmciOnuDownloadStatusChange</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.11"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuAutoAssign</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.7"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuError</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.3"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuLineStatusChange</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.8"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponRogueOnuTrap</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.9"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponRssiRogueOnuTrap</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.1"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponSerialNumberFound</setEventAttribute></when> <when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.2"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponSerialNumberLost</setEventAttribute></when> </choose> </parsingInstructions>2019-12-31 00:04:26 0.0.0.0INFORM, SNMP v2c, community aarpnet . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3402597326) 393 days, 19:39:33.26 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.5504 SNMPv2-SMI::enterprises.5504.5.14.1.20.1.6 = INTEGER: 1 SNMPv2-SMI::enterprises.5504.5.14.1.5.1.3 = INTEGER: 3 SNMPv2-SMI::enterprises.5504.5.14.1.2.1.19 = INTEGER: 2