Tellabs1150ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.1397.2.29]]></eventFormatRecognizer>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute>
<setEventAttribute attr="eventSeverity">1</setEventAttribute>
<setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/>
<attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/>
<attrKeyMap attr="intfName" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "/>
<attrKeyMap attr="eventSeverity" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: "/>
<attrKeyMap attr="eventDesc" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "/>
<attrKeyMap attr="_Noidea" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: "/>
</collectAndSetAttrByKeyValuePair>
<choose>
<when test='$eventDesc = "DYING-GASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$eventDesc = "GPON-RXPWR-LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
</choose>
<!--
<choose>
<when test='$_id = "1"'>
<setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$_id = "2"'>
<setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
</choose>
-->
<setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute>
</parsingInstructions>
2017-09-13 12:03:14 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104052702) 12 days, 1:02:07.02 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:03:21 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104053498) 12 days, 1:02:14.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:04:53 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104062603) 12 days, 1:03:46.03 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:04:57 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104063004) 12 days, 1:03:50.04 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:08:07 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082058) 12 days, 1:07:00.58 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:08:11 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082498) 12 days, 1:07:04.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:09:47 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092087) 12 days, 1:08:40.87 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-09-13 12:09:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092513) 12 days, 1:08:45.13 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: ""MDS1-1-2-19"" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
2017-10-09 06:49:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (181339924) 20 days, 23:43:19.24 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-ESUA-1" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "LOPL-XCV" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1
Tellabs1150ANY<patternDefinitions>
<pattern name="patEverything"><![CDATA[.*]]></pattern>
</patternDefinitions>
<eventFormatRecognizer><![CDATA[olan\s-\s(\d+)\s-\sBOM\s\D(ALARM|PLATFM|EXCEPT|INFO)]]></eventFormatRecognizer>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<hostName:gPatStr>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord>\s<status:gPatStr>:<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<hostName:gPatStr>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord><_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<reptDevIpAddr:gPatIpV4Dot>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord>.*:<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<reptDevIpAddr:gPatIpV4Dot>\s+olan\s+-\s+<errorNo:gPatInt>\s+-\s+<_type:gPatStr>\s+%<errorString:gPatWord>-<actionError:gPatWord>-<errReason:gPatWord><_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<default>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_sev:gPatSyslogPRI>\d+\s+<_year:gPatYear>-<_mon:gPatMon>-<_day:gPatDay>T<_time:gPatTime>[+-][\d:]+\s+<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</default>
</switch>
<when test="exist _year">
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
</when>
<setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute>
<when test="exist _sev">
<setEventAttribute attr="eventSeverity">$_sev</setEventAttribute>
</when>
<setEventAttribute attr="extEventRecvProto">Syslog</setEventAttribute>
<when test='$errorString = "ALARM"'>
<collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_body">
<attrKeyMap attr="intfName" key="AID"/>
<attrKeyMap attr="alarm" key="SV"/>
<attrKeyMap attr="eventDesc" key="PC"/>
<attrKeyMap attr="actionTime" key="ET"/>
<attrKeyMap attr="actionResult" key="DS"/>
</collectFieldsByKeyValuePair>
</when>
<when test='$errorString = "PLATFM"'>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[<details:patEverything>,<_body1:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_body1">
<attrKeyMap attr="serialNumber" key="s/n"/>
</collectFieldsByKeyValuePair>
</when>
<when test='$errorString = "INFO"'>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[<details:patEverything>]]></regex>
</collectFieldsByRegex>
</when>
<when test='$errorString = "EXCEPT"'>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[<details:patEverything>]]></regex>
</collectFieldsByRegex>
</when>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_Generic"</setEventAttribute>
<when test="exist status">
<when test='$status = "SET"'>
<choose>
<when test='$eventDesc = "AIS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_AIS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PS-FAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-FAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PS-MISS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-MISS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ACPWR-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACPWR-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-OVERLOAD-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-OVERLOAD-ONT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-SD-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-SD-ONT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CLFAN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "COOLINGFANFAILURE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-DNAME"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-DNAME"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-MALF-CONF-DOC"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-MALF-CONF-DOC"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-NOT-AUTH"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-NOT-AUTH"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-SRV-RSPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-SRV-RSPFAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-TIMEOUT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-TIMEOUT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LPR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LPR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-OAML"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DHCP-SRV-INCMPLTRESP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-INCMPLTRESP"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DHCP-SRV-NORESP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-NORESP"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOA"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-CPE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-CPE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "GIGE-PHY-FAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_GIGE-PHY-FAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PON-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LACPGRPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LACPGRPFAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LCD"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LCD"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LWBATVG"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LWBATVG"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-1"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-1"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-2"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-2"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-3"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-3"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-4"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-4"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-5"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-5"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-6"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-6"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-7"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-7"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-8"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-8"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-9"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-9"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-10"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-10"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-11"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-11"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-12"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-12"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-13"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-13"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-14"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-14"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-15"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-15"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-16"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-16"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-LAN-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LAN-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MOCA-LOL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LOL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MOCA-LTD-LNK"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LTD-LNK"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-RFV-OVLD"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-RFV-OVLD"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PWR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PWR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DYINGGASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_DG"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-SF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-SF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "REPLUNITMISS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLUNITMISS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-PEE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-PEE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MEA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MEA"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RING_CCMFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RING_CCMFAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_NOTPROV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTPROV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_MULTIPROV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_MULTIPROV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_NOTAVAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTAVAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SDF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SDF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SOFTWARE_PROCESSING_ERR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-CANNOT-AUTH"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-CANNOT-AUTH"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-DNAME"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-DNAME"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-SRV-RSPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-SRV-RSPFAIL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-TIMEOUT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-TIMEOUT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "INTSFT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_INTSFT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SYNCLOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SYNCLOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-XCV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "EMSCOMMLOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_EMSCOMMLOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SWFTDWN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SWFTDWN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-LOS-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-LOS-ONT"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VLAN-PROV-ERROR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VLAN-PROV-ERROR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$errReason = "REPLACEABLEUNITMISSING"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLACEABLEUNITMISSING"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SUBSCRIBER_LAN_LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SUBSCRIBER_LAN_LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOSSOFSIGNAL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOSSOFSIGNAL"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "ACCESS_VIOLATION"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACCESS_VIOLATION"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DYING-GASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "CONNECTIONESTABLISHMENTERROR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$eventDesc = "ONT_RXPWR_LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "GPON-RXPWR-LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
</choose>
</when>
<when test='$status = "CLR"'>
<choose>
<when test='$eventDesc = "REPLACEABLEUNITMISSING"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLACEABLEUNITMISSING-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "AIS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_AIS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PS-FAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-FAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PS-MISS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PS-MISS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ACPWR-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACPWR-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CONTCOM-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-OVERLOAD-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-OVERLOAD-ONT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-SD-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-SD-ONT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CLFAN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "COOLINGFANFAILURE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-DNAME"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-DNAME-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-MALF-CONF-DOC"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-MALF-CONF-DOC-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-NOT-AUTH"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-NOT-AUTH-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-SRV-RSPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-SRV-RSPFAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CSRV-RCV-TIMEOUT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CSRV-RCV-TIMEOUT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LPR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LPR-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-OAML-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DHCP-SRV-INCMPLTRESP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-INCMPLTRESP-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DHCP-SRV-NORESP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DHCP-SRV-NORESP-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOA-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-CPE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-CPE-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "GIGE-PHY-FAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_GIGE-PHY-FAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PON-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LACPGRPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LACPGRPFAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LOF-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LCD"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-LCD-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LWBATVG"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LWBATVG-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-1"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-1-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-2"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-2-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-3"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-3-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-4"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-4-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-5"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-5-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-6"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-6-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-7"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-7-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-8"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-8-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-9"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-9-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-10"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-10-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-11"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-11-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-12"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-12-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-13"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-13-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-14"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-14-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-15"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-15-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MISC-16"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MISC-16-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-LAN-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LAN-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MOCA-LOL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LOL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MOCA-LTD-LNK"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MOCA-LTD-LNK-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-RFV-OVLD"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-RFV-OVLD-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "PWR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PWR-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "DYINGGASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_DG"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_DYINGGASP-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-SF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-SF-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "REPLUNITMISS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_REPLUNITMISS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-PEE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-PEE-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "MEA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_MEA-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RING_CCMFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RING_CCMFAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_NOTPROV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTPROV-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_MULTIPROV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_MULTIPROV-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "RPI_NOTAVAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_RPI_NOTAVAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SDF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SDF-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SOFTWARE_PROCESSING_ERR-CLR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-CANNOT-AUTH"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-CANNOT-AUTH-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-DNAME"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-DNAME-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-SRV-RSPFAIL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-SRV-RSPFAIL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SIPUA-REG-TIMEOUT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SIPUA-REG-TIMEOUT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "INTSFT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_INTSFT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SYNCLOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SYNCLOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOPL-XCV-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "EMSCOMMLOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_EMSCOMMLOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SWFTDWN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SWFTDWN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VIDEO-LOS-ONT"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VIDEO-LOS-ONT-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "VLAN-PROV-ERROR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_VLAN-PROV-ERROR-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SUBSCRIBER_LAN_LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SUBSCRIBER_LAN_LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOSSOFSIGNAL"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_LOSSOFSIGNAL-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "ACCESS_VIOLATION"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ACCESS_VIOLATION-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT_RXPWR_LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "DYING-GASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "CONNECTIONESTABLISHMENTERROR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "GPON-RXPWR-LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL_XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
</choose>
</when>
</when>
</parsingInstructions>
<4>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS SET:AID=MDS1-3-1-6 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:34 DS=<3>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS SET:AID=MDS1-3-1-22 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:23:34 DS=<6>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 030004 - BOM %PLATFM-INFO-ONTDEPART ONT MDS1-3-1-22 is no longer ranged on the PON, s/n=BFWS00015435<4>1 2017-09-12T12:23:34-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS SET:AID=MDS1-3-1-22 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:34 DS=<4>1 2017-09-12T12:23:39-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS CLR:AID=MDS1-3-1-6 SV=MN PC=LOPL_LOS ET=09/12/2017 12:23:39 DS=<3>1 2017-09-12T12:24:19-04:00 127.0.0.1 olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS CLR:AID=MDS1-3-1-22 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:24:19 DS=<6>1 2017-09-12T12:24:23-04:00 AmtrakHQ olan - 030003 - BOM %PLATFM-INFO-ONTARRIVE ONT MDS1-3-1-22 accepted on the PON, s/n=BFWS00015435<4>1 2017-09-12T12:24:25-04:00 AmtrakHQ olan - 040032 - BOM %ALARM-WARN-LOPLLOS CLR:AID=MDS1-3-1-22 SV=MN PC=LOPL_LOS ET=09/12/2017 12:24:25 DS=<3>1 2017-09-12T12:25:43-04:00 AmtrakHQ olan - 040016 - BOM %ALARM-ERROR-EMSCOMMLOS SET:AID=MDS1-5-2-3 SV=MJ PC=CONNECTIONESTABLISHMENTERROR ET=09/12/2017 12:25:43 DS=<6>1 2017-09-12T12:25:43-04:00 10.20.2.2 olan - 030004 - BOM %PLATFM-INFO-ONTDEPART ONT MDS1-5-2-3 is no longer ranged on the PON, s/n=BFWS00041929<4>1 2017-09-12T12:25:45-04:00 AmtrakHQ olan - 040033 - BOM %ALARM-WARN-LOPLLOF SET:AID=MDS1-5-2-3 SV=MN PC=LOPL_LOF ET=09/12/2017 12:25:45 DS=<190>1 2019-08-19T15:29:56-04:00 Wilmington olan - 009000 - BOM %INFO-INFO-INFO ***>>> Secure Download INITIATED <<<*** file=ONT729_015180.tgz<187>1 2019-08-19T15:30:00-04:00 AmtrakREA olan - 009003 - BOM %EXCEPT-ERROR-EXCEPT EsuUplinkPerfMonitor::svc - Detected clock change: Monotonic delta = 901, Wall time delta = 899<186>1 2019-08-19T15:30:47-04:00 Wilmington olan - 009002 - BOM %EXCEPT-CRIT-EXCEPT (1293943984) Failed to download secondary image for: MDS1-1-1-1-MDU. Image NOT autodownloaded<185>1 2019-08-19T15:30:47-04:00 Wilmington olan - 009001 - BOM %EXCEPT-ALERT-EXCEPT **Error** Download Failed. GET operation Failed.... Error Reason: 107VoltserverMGT500ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.43522]]></eventFormatRecognizer>
<testEvents>
<testEvent><![CDATA[]]></testEvent>
</testEvents>
<patternDefinitions>
<pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern>
<pattern name="patStrColon"><![CDATA[[^:]*]]></pattern>
</patternDefinitions>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>\s+<_id:gPatStr>\s+ Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*<_id:gPatStr>.*Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<collectFieldsByRegex src="$hostName">
<regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<when test='matches($_reptIp, "^\w+:")'>
<collectFieldsByRegex src="$_reptIp">
<regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</when>
<when test='$_reptIp != "127.0.0.1"'>
<when test='$_reptIp != "0.0.0.0"'>
<setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute>
</when>
</when>
<setEventAttribute attr="_mgtStatus">null</setEventAttribute>
<setEventAttribute attr="_majorStatus">null</setEventAttribute>
<setEventAttribute attr="_chassisID">null</setEventAttribute>
<setEventAttribute attr="_serialNo">null</setEventAttribute>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="_mgtStatus" key="SNMPv2-SMI::enterprises.43522.1.2.1.1.7" />
<attrKeyMap attr="_chassisID" key="SNMPv2-SMI::enterprises.43522.1.2.1.2.5" />
<attrKeyMap attr="_serialNo" key="SNMPv2-SMI::enterprises.43522.1.2.1.3.1.2" />
<attrKeyMap attr="_majorStatus" key="SNMPv2-SMI::enterprises.43522.1.2.1.3.1.3" />
<attrKeyMap attr="srcMACAddr" key="IF-MIB::ifPhysAddress.1 = STRING:" />
</collectAndSetAttrByKeyValuePair>
<when test="$_majorStatus != null">
<collectFieldsByRegex src="$_majorStatus">
<regex><![CDATA[<devPort:gPatInt>.*Gauge32: <incidentStatus:gPatInt>]]></regex>
</collectFieldsByRegex>
</when>
<when test="$_mgtStatus != null">
<collectFieldsByRegex src="$_mgtStatus">
<regex><![CDATA[<devPort:gPatInt>.*Gauge32: <incidentStatus:gPatInt>]]></regex>
</collectFieldsByRegex>
</when>
<when test="$_chassisID != null">
<collectFieldsByRegex src="$_chassisID">
<regex><![CDATA[<:gPatInt>.*STRING: \"<hwComponentName:gPatStr>\"]]></regex>
</collectFieldsByRegex>
</when>
<when test="$_serialNo != null">
<collectFieldsByRegex src="$_serialNo">
<regex><![CDATA[<:gPatInt>.*STRING: \"<serialNumber:gPatStr>]]></regex>
</collectFieldsByRegex>
</when>
<setEventAttribute attr="eventType">voltserverMGT500-txCardFaultAlarm</setEventAttribute>
<choose>
<when test="$_idsev = 2">
<setEventAttribute attr="eventType">voltserverMGT500-mgtFaultAlarm</setEventAttribute>
</when>
<when test="$_idsev = 1">
<setEventAttribute attr="eventType">voltserverMGT500-txCardFaultAlarm</setEventAttribute>
</when>
</choose>
</parsingInstructions>
2019-06-17 12:44:16 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (87057425) 10 days, 1:49:34.25 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.43522.1.2 SNMPv2-SMI::enterprises.43522.1.2.1.3.1.2.18 = STRING: "\"3200100754\" " SNMPv2-SMI::enterprises.43522.1.2.1.3.1.3.18 = Gauge32: 520 SNMPv2-SMI::enterprises.43522.1.2.1.2.5.0 = STRING: "\"1200000346\" " SNMPv2-SMI::enterprises.816 = STRING: "0:80:a3:ba:da:f9"BuffaloTerristationANY<patternDefinitions>
<pattern name="patStrRightParenthesis">
<![CDATA[[^\)]*]]>
</pattern>
<pattern name="patStrColon">
<![CDATA[[^:]*]]>
</pattern>
</patternDefinitions>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex>
<![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpV4Dot>\(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex>
<![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> <:gPatStr> \(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<when test='matches($_reptIp, "^\w+:")'>
<collectFieldsByRegex src="$_reptIp">
<regex>
<![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</when>
<when test='$_reptIp != "127.0.0.1"'>
<when test='$_reptIp != "0.0.0.0"'>
<setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute>
</when>
</when>
<collectAndSetAttrByKeyValuePair src="$_body" sep="\t\\| SNMP">
<attrKeyMap attr="_id" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/>
<attrKeyMap attr="_nasErrorMsg" key="SNMPv2-SMI::enterprises.5227.27.1.4.1.2"/>
<attrKeyMap attr="_nasErrorDate" key="SNMPv2-SMI::enterprises.5227.27.1.4.1.3"/>
<attrKeyMap attr="_nasInformationMsg" key="SNMPv2-SMI::enterprises.5227.27.1.5.1.2"/>
<attrKeyMap attr="_nasInformationDate" key="SNMPv2-SMI::enterprises.5227.27.1.5.1.3"/>
</collectAndSetAttrByKeyValuePair>
<choose>
<when test='$_id = "SNMPv2-SMI::enterprises.5227.27.2.1"'>
<setEventAttribute attr="eventType">Buffalo-Storage-nasErrorOccur</setEventAttribute>
</when>
<when test='$_id = "SNMPv2-SMI::enterprises.5227.27.2.2"'>
<setEventAttribute attr="eventType">Buffalo-Storage-nasInformationOccur</setEventAttribute>
</when>
</choose>
</parsingInstructions>2018-04-17 12:11:29 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (1084987088) 125 days, 13:51:10.88 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.5227.27.2.2 SNMPv2-SMI::enterprises.5227.27.1.5.1.2.1 = STRING: "I52:new_fw_available_info" SNMPv2-SMI::enterprises.5227.27.1.5.1.3.1 = STRING: "2018/01/16 08:53:21"
Tellabs1150ANY<eventFormatRecognizer><![CDATA[iso.0.8802]]></eventFormatRecognizer>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute>
<setEventAttribute attr="eventSeverity">1</setEventAttribute>
<setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/>
<attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/>
<attrKeyMap attr="lldpStatsRemTablesInserts" key="iso.0.8802.1.1.2.1.2.2.0 = Gauge32: "/>
<attrKeyMap attr="lldpStatsRemTablesDeletes" key="iso.0.8802.1.1.2.1.2.3.0 = Gauge32: "/>
<attrKeyMap attr="lldpStatsRemTablesDrops" key="iso.0.8802.1.1.2.1.2.4.0 = Gauge32: "/>
<attrKeyMap attr="lldpStatsRemTablesAgeouts" key="iso.0.8802.1.1.2.1.2.5.0 = Gauge32: "/>
</collectAndSetAttrByKeyValuePair>
<setEventAttribute attr="eventType">"Tellabs_LLDP_Generic"</setEventAttribute>
<setEventAttribute attr="eventSeverity">1</setEventAttribute>
<!--
<choose>
<when test='$_id = "1"'>
<setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$_id = "2"'>
<setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
</choose>
-->
<setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute>
</parsingInstructions>
2018-07-10 04:53:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (521810183) 60 days, 9:28:21.83 SNMPv2-MIB::snmpTrapOID.0 = OID: iso.0.8802.1.1.2.0.0.1 iso.0.8802.1.1.2.1.2.2.0 = Gauge32: 45374 iso.0.8802.1.1.2.1.2.3.0 = Gauge32: 3866 iso.0.8802.1.1.2.1.2.4.0 = Gauge32: 0 iso.0.8802.1.1.2.1.2.5.0 = Gauge32: 1754Tellabs1150ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.1397.2.29]]></eventFormatRecognizer>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex>
<![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostIpAddr:gPatIpV4Dot>.*Cold Start Trap\(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> .*Cold Start Trap \(<_id:gPatInt>\)<_body:gPatMesgBody>]]>
</regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<setEventAttribute attr="eventType">PH_DEV_MON_CUST_TELLABS_Unknown_Event</setEventAttribute>
<setEventAttribute attr="eventSeverity">1</setEventAttribute>
<setEventAttribute attr="extEventRecvProto">Snmp Trap</setEventAttribute>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="sysUpTime" key="DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: "/>
<attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/>
<attrKeyMap attr="intfName" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "/>
<attrKeyMap attr="_eventSev" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: "/>
<attrKeyMap attr="eventDesc" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "/>
<attrKeyMap attr="_Noidea" key="SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: "/>
</collectAndSetAttrByKeyValuePair>
<choose>
<when test="$_eventSev != 4">
<choose>
<when test='$eventDesc = "DYING-GASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$eventDesc = "GPON-RXPWR-LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "SW-PROC-ERR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "CLFAN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV"</setEventAttribute>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
</choose>
</when>
<when test="$_eventSev = 4">
<choose>
<when test='$eventDesc = "DYING-GASP"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_PON_DOWN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "CONTCOM"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-CONTCOM-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "GPON-RXPWR-LOW"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-RX-POWER_LOW-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOS"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOS-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOF"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOF-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-LOA"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-LOA-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "ONT-SIGNAL-DEGRADE"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-SIGNAL_DEGRADE-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-OAML"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL-OAML-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "SW-PROC-ERR"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_SPE-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "CLFAN"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_CLFAN-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
<when test='$eventDesc = "LOPL-XCV"'>
<setEventAttribute attr="eventType">"PH_DEV_MON_CUST_TELLABS_ONT-LOPL_XCV-CLR"</setEventAttribute>
<setEventAttribute attr="eventSeverity">0</setEventAttribute>
</when>
</choose>
</when>
</choose>
<!--
<choose>
<when test='$_id = "1"'>
<setEventAttribute attr="eventType">"ONT-DYING"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$_id = "2"'>
<setEventAttribute attr="eventType">"ONT-CONTCOM"</setEventAttribute>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
</choose>
-->
<setEventAttribute attr="hostIpAddr">$reptDevIpAddr</setEventAttribute>
</parsingInstructions>
2017-09-13 12:03:14 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104052702) 12 days, 1:02:07.02 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:03:21 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104053498) 12 days, 1:02:14.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:04:53 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104062603) 12 days, 1:03:46.03 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:04:57 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104063004) 12 days, 1:03:50.04 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:08:07 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082058) 12 days, 1:07:00.58 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:08:11 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104082498) 12 days, 1:07:04.98 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:09:47 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092087) 12 days, 1:08:40.87 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-1-2-19" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 2 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "CONTCOM" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-09-13 12:09:52 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (104092513) 12 days, 1:08:45.13 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: ""MDS1-1-2-19"" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "DYING-GASP" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 12017-10-09 06:49:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (181339924) 20 days, 23:43:19.24 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.1397.2.29.2.0.1 SNMPv2-SMI::enterprises.1397.2.29.2.1.1.0 = STRING: "MDS1-ESUA-1" SNMPv2-SMI::enterprises.1397.2.29.2.1.2.0 = INTEGER: 4 SNMPv2-SMI::enterprises.1397.2.29.2.1.3.0 = STRING: "LOPL-XCV" SNMPv2-SMI::enterprises.1397.2.29.2.1.4.0 = INTEGER: 1AppnetaAppnetaANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.19041]]></eventFormatRecognizer>
<testEvents>
<testEvent><![CDATA[]]></testEvent>
</testEvents>
<patternDefinitions>
<pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern>
<pattern name="patStrColon"><![CDATA[[^:]*]]></pattern>
</patternDefinitions>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>.* Cold Start Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*Cold Start Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<collectFieldsByRegex src="$hostName">
<regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<when test='matches($_reptIp, "^\w+:")'>
<collectFieldsByRegex src="$_reptIp">
<regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</when>
<when test='$_reptIp != "127.0.0.1"'>
<when test='$_reptIp != "0.0.0.0"'>
<setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute>
</when>
</when>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: " />
<attrKeyMap attr="eventDetails" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: " />
<attrKeyMap attr="eventId" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: " />
<attrKeyMap attr="eventTime" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: " />
<attrKeyMap attr="eventTypeNis" key="SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: " />
<attrKeyMap attr="monitoringPointIp" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: " />
<attrKeyMap attr="monitoringPointName" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: " />
<attrKeyMap attr="monitoringPointStatus" key="SNMPv2-SMI::enterprises.19041.2.1.5.6.2.0 = INTEGER: " />
<attrKeyMap attr="pathGroupId" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: " />
<attrKeyMap attr="pathGroupName" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: " />
<attrKeyMap attr="pathEventDeliveryTime" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: " />
<attrKeyMap attr="pathId" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: " />
<attrKeyMap attr="pathName" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: " />
<attrKeyMap attr="pathDesc" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: " />
<attrKeyMap attr="pathTargetType" key="SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: " />
<attrKeyMap attr="sqMeasuredParameter" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: " />
<attrKeyMap attr="sqMeasuredValue" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = INTEGER: " />
<attrKeyMap attr="sqParameterState" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: " />
<attrKeyMap attr="sqPathServiceQuality" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: " />
<attrKeyMap attr="sqSqdName" key="SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: " />
<attrKeyMap attr="testId" key="SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = STRING: " />
<attrKeyMap attr="webMonitorId" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.1.0 = STRING: " />
<attrKeyMap attr="webAppName" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.2.0 = STRING: " />
<attrKeyMap attr="webMilestoneName" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.3.0 = STRING: " />
<attrKeyMap attr="webUrl" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.4.0 = STRING: " />
<attrKeyMap attr="webMonitorDeepLink" key="SNMPv2-SMI::enterprises.19041.2.1.5.8.5.0 = STRING: " />
</collectAndSetAttrByKeyValuePair> <setEventAttribute attr="eventType">Appneta-NewTrapType</setEventAttribute>
<choose>
<when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.53"'>
<setEventAttribute attr="eventType">Appneta-apnMonitoringPointEvent</setEventAttribute>
</when>
<when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.50"'>
<setEventAttribute attr="eventType">Appneta-apnSqEvent</setEventAttribute>
</when>
<when test='$oid = "SNMPv2-SMI::enterprises.19041.2.1.103.0.54"'>
<setEventAttribute attr="eventType">Appneta-apnWebSqEvent</setEventAttribute>
</when>
</choose>
</parsingInstructions>
2019-02-11 11:10:53 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14608908) 1 day, 16:34:49.08 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Measured Data Loss (1.4300%) violates condition Data Loss > 0 %" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710921" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:09:34 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 0 SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: 4037 SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: "SkypeMonitoring" SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: "2019-02-11 16:10:53 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14684 SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: "Appneta-Test <-> Skype (single)" SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: "Ashburn <-> -" SNMPv2-SMI::enterprises.19041.2.1.5.3.4.0 = STRING: "13.107.8.2" SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: "Auto" SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "1.43" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Voice Server" SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = INTEGER: -1
2019-02-11 11:12:23 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14617908) 1 day, 16:36:19.08 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Overall Total Time > 8000 ms has violated (measured: 9854ms)" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710926" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:11:36 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 4 SNMPv2-SMI::enterprises.19041.2.1.5.8.1.0 = INTEGER: 11702 SNMPv2-SMI::enterprises.19041.2.1.5.8.2.0 = STRING: "Office365" SNMPv2-SMI::enterprises.19041.2.1.5.8.3.0 = STRING: "Overall" SNMPv2-SMI::enterprises.19041.2.1.5.8.4.0 = STRING: "https://login.microsoftonline.com" SNMPv2-SMI::enterprises.19041.2.1.5.8.5.0 = STRING: "https://app-11.pm.appneta.com/pvc/webpath/webpathdetail.html?webpathid=11702&activeTab=7&st=17147" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14681 SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 34 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "9854.0" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 30 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Office365 (Always)"
2019-02-11 11:14:53 0.0.0.0TRAP2, SNMP v2c, community 2020tek . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (14632917) 1 day, 16:38:49.17 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.19041.2.1.103.0.50 SNMPv2-SMI::enterprises.19041.2.1.5.1.3.0 = STRING: "Measured Data Loss (0.0000%) clears condition Data Loss > 0 %" SNMPv2-SMI::enterprises.19041.2.1.5.1.1.0 = STRING: "10710921" SNMPv2-SMI::enterprises.19041.2.1.5.1.2.0 = STRING: "2019-02-11 16:13:26 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.1.4.0 = INTEGER: 0 SNMPv2-SMI::enterprises.19041.2.1.5.3.2.0 = INTEGER: 4037 SNMPv2-SMI::enterprises.19041.2.1.5.3.3.0 = STRING: "SkypeMonitoring" SNMPv2-SMI::enterprises.19041.2.1.5.3.7.0 = STRING: "2019-02-11 16:14:53 UTC" SNMPv2-SMI::enterprises.19041.2.1.5.3.1.0 = INTEGER: 14684 SNMPv2-SMI::enterprises.19041.2.1.5.3.8.0 = STRING: "Appneta-Test <-> Skype (single)" SNMPv2-SMI::enterprises.19041.2.1.5.3.6.0 = STRING: "Ashburn <-> -" SNMPv2-SMI::enterprises.19041.2.1.5.3.4.0 = STRING: "13.107.8.2" SNMPv2-SMI::enterprises.19041.2.1.5.3.5.0 = STRING: "Auto" SNMPv2-SMI::enterprises.19041.2.1.5.6.3.0 = STRING: "104.37.106.14" SNMPv2-SMI::enterprises.19041.2.1.5.6.1.0 = STRING: "Appneta-Test" SNMPv2-SMI::enterprises.19041.2.1.5.4.2.0 = INTEGER: 3 SNMPv2-SMI::enterprises.19041.2.1.5.4.3.0 = STRING: "0.0" SNMPv2-SMI::enterprises.19041.2.1.5.4.4.0 = INTEGER: 10 SNMPv2-SMI::enterprises.19041.2.1.5.4.1.0 = INTEGER: 10 SNMPv2-SMI::enterprises.19041.2.1.5.4.5.0 = STRING: "Voice Server" SNMPv2-SMI::enterprises.19041.2.1.5.5.1.0 = INTEGER: -1GenericGenericANY<patternDefinitions>
<pattern name="patStrEndColon"><![CDATA[[^:]*]]></pattern>
<pattern name="patStrDoubleQuoted"><![CDATA[[^"]*]]></pattern>
</patternDefinitions>
<eventFormatRecognizer><![CDATA[.*thousandeyes:.*]]></eventFormatRecognizer>
<parsingInstructions>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<:gPatSyslogPRI>?<_mon:gPatMon>\s+<_day:gPatDay>\s+<_time:gPatTime><_securityType:patStrEndColon>:\s*<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<collectAndSetAttrByJSON src="$_body">
<attrKeyMap attr="TE_Agent" key="alert.agents"/>
<attrKeyMap attr="TE_AlertId" key="alert.alertId"/>
<attrKeyMap attr="TE_ApiLink" key="alert.apiLinks"/>
<attrKeyMap attr="TE_EndDate" key="alert.dateEnd"/>
<attrKeyMap attr="TE_StartDate" key="alert.dateStart"/>
<attrKeyMap attr="TE_Monitor" key="alert.monitors"/>
<attrKeyMap attr="TE_Permalink" key="alert.permalink"/>
<attrKeyMap attr="TE_ruleExpression" key="alert.ruleExpression"/>
<attrKeyMap attr="TE_ruleId" key="alert.ruleId"/>
<attrKeyMap attr="eventName" key="alert.ruleName"/>
<attrKeyMap attr="TE_testID" key="alert.testId"/>
<attrKeyMap attr="TE_testName" key="alert.testName"/>
<attrKeyMap attr="TE_type" key="alert.type"/>
<attrKeyMap attr="eventId" key="eventId"/>
<attrKeyMap attr="_eventType" key="eventType"/>
<attrKeyMap attr="TE_AlertAgent" key="agentAlert"/>
<attrKeyMap attr="TE_ruleId" key="agentAlert.agentRuleID"/>
<attrKeyMap attr="TE_AgentNotificationId" key="agentAlert.agentNotificationId"/>
<attrKeyMap attr="TE_AgentHostanme" key="agentAlert.hostanme"/>
<attrKeyMap attr="TE_AgentName" key="agentAlert.agentName"/>
<attrKeyMap attr="TE_AgentIpAddress" key="agentAlert.ipAddress"/>
<attrKeyMap attr="TE_Active" key="agentAlert.active"/>
<attrKeyMap attr="TE_EndDate" key="agentAlert.dateEnd"/>
<attrKeyMap attr="TE_StartDate" key="agentAlert.dateStart"/>
<attrKeyMap attr="TE_ruleExpression" key="agentAlert.ruleExpression"/>
<attrKeyMap attr="eventName" key="agentAlert.ruleName"/>
<attrKeyMap attr="TE_StartMetrics" key="agentAlert.metricAtStart"/>
<attrKeyMap attr="TE_EndMetrics" key="agentAlert.metricsAtEnd"/>
</collectAndSetAttrByJSON>
<setEventAttribute attr="eventType">combineMsgId("ThousandEyes-",$_eventType)</setEventAttribute>
<setEventAttribute attr="eventTime">toDateTime($_mon, $_day, $_time )</setEventAttribute>
<when test='$_securityType = "alert"'>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$phCustId = "1"'>
<setEventAttribute attr="srcIpAddr">192.168.220.70</setEventAttribute>
</when>
<when test='$phCustId = "2009"'>
<setEventAttribute attr="srcIpAddr">172.20.7.80</setEventAttribute>
</when>
<when test='$phCustId = "2011"'>
<setEventAttribute attr="srcIpAddr">192.168.225.81</setEventAttribute>
</when>
</parsingInstructions>
<5>Mar 22 10:25:55 thousandeyes: {"alert":{"agents":[{"active":0,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-21 16:25:34","metricsAtEnd":"Page Load has error: false","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=80688"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-21 16:25:33","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=75669"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-21 16:25:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070\u0026agentId=75675"}],"alertId":23576070,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887749","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887749","rel":"data"}],"dateEnd":"2019-03-22 14:10:46","dateStart":"2019-03-21 16:25:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406410-23576070","eventType":"ALERT_NOTIFICATION_CLEAR"} <5>Mar 22 10:30:44 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 14:15:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=80688"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 14:15:36","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=75675"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 14:15:35","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437\u0026agentId=75669"}],"alertId":23598437,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887749","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887749","rel":"data"}],"dateStart":"2019-03-22 14:15:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23598437","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406890-23598437","eventType":"ALERT_NOTIFICATION_TRIGGER"} <5>Mar 22 12:40:42 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 04:40:38","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=75675"},{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 04:40:37","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=75669"},{"active":0,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 04:40:12","metricsAtEnd":"Page Load has error: false","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842\u0026agentId=80688"}],"alertId":23587842,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887755","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887755","rel":"data"}],"dateEnd":"2019-03-22 16:40:17","dateStart":"2019-03-22 04:40:38","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23587842","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887755,"testName":"General Page with Video","type":"Page Load","violationCount":3},"eventId":"54417627-23587842","eventType":"ALERT_NOTIFICATION_CLEAR"} <5>Mar 22 12:47:27 thousandeyes: {"alert":{"agents":[{"active":1,"agentId":75669,"agentName":"dc-nuc","dateStart":"2019-03-22 16:45:39","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=75669"},{"active":1,"agentId":75675,"agentName":"rockville-nuc","dateStart":"2019-03-22 16:45:36","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=75675"},{"active":1,"agentId":80688,"agentName":"lakewood-nuc","dateStart":"2019-03-22 16:45:08","metricsAtEnd":"","metricsAtStart":"Page Load has error: true","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427\u0026agentId=80688"}],"alertId":23601427,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/887755","rel":"related"},{"href":"https://api.thousandeyes.com/v4/web/page-load/887755","rel":"data"}],"dateStart":"2019-03-22 16:45:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23601427","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887755,"testName":"General Page with Video","type":"Page Load","violationCount":3},"eventId":"54418005-23601427","eventType":"ALERT_NOTIFICATION_TRIGGER"}<5>Mar 28 10:47:41 thousandeyes: {"agentAlert":{"active":2,"agentId":80697,"agentName":"chicago-nuc","agentNotificationId":23753652,"agentRuleId":219720,"dateEnd":1553784460,"dateStart":1553782671,"hostname":"chicago-nuc","ipAddress":"10.132.129.211","metricsAtEnd":"N/A (notification rule modified or removed from agent)","metricsAtStart":"Last Contact: 22,981 minutes ago","ruleExpression":"Last Contact = 3 minutes ago","ruleName":"NUCs Reachability"},"eventId":"1363485-23753652","eventType":"AGENT_ALERT_NOTIFICATION_CLEAR"}<5>Mar 29 15:12:52 thousandeyes: {"agentAlert":{"active":1,"agentId":80697,"agentName":"chicago-nuc","agentNotificationId":23787390,"agentRuleId":219720,"dateStart":1553886772,"hostname":"chicago-nuc","ipAddress":"10.132.129.211","metricsAtEnd":"","metricsAtStart":"Last Contact: 24,716 minutes ago","ruleExpression":"Last Contact = 3 minutes ago","ruleName":"NUCs Reachability"},"eventId":"1364976-23787390","eventType":"AGENT_ALERT_NOTIFICATION_TRIGGER"} <5>Aug 5 10:13:22 thousandeyes: {"alert":{"alertId":27471920,"apiLinks":[{"href":"https://api.thousandeyes.com/v4/tests/880007","rel":"related"},{"href":"https://api.thousandeyes.com/v4/net/bgp-metrics/880007","rel":"data"}],"dateEnd":"2019-08-04 05:01:05","dateStart":"2019-08-02 23:30:00","monitors":[{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":57,"monitorName":"St. Petersburg-1 - Obit (AS 8492)","network":"Obit Telecommunications, St.Petersburg, Russia (AS 8492)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=57","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":74,"monitorName":"London-9 - Global Crossing (AS 3549)","network":"Level 3 Communications, Inc. (AS 3549)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=74","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":14,"monitorName":"Amsterdam-2 - KPN (AS 286)","network":"KPN (AS 286)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=14","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":83,"monitorName":"San Francisco, CA - Savvis (AS 3561)","network":"Savvis (AS 3561)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=83","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":51,"monitorName":"Tokyo-2 - M-Root (AS 7500)","network":"WIDE Project (AS 7500)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=51","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":75,"monitorName":"Tokyo-4 - IIJ (AS 2497)","network":"IIJ Internet Initiative Japan Inc. (AS 2497)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=75","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":1928,"monitorName":"San Jose, CA-6 - HostVirtual (AS 36236)","network":"VR HOSTED (AS 36236)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=1928","prefix":"52.84.232.0/22"},{"active":2,"dateStart":"2019-08-02 23:30:00","metricsAtEnd":"N/A (target not valid anymore)","metricsAtStart":"Reachability: 0%","monitorId":208,"monitorName":"Portland, OR - State of Oregon (AS 1798)","network":"State of Oregon (AS 1798)","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=27471920\u0026monitorId=208","prefix":"52.84.232.0/22"}], "dateEnd":"2019-03-22 14:10:46","dateStart":"2019-03-21 16:25:39","permalink":"https://app.thousandeyes.com/alerts/list/?__a=153145\u0026alertId=23576070","ruleExpression":"Page Load has error","ruleId":942634,"ruleName":"Default Page Load Alert Rule","testId":887749,"testName":"InfoNet News Now Dashboard","type":"Page Load","violationCount":3},"eventId":"54406410-23576070","eventType":"ALERT_NOTIFICATION_CLEAR"}GenericUnixANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.2020]]></eventFormatRecognizer>
<testEvents>
<testEvent><![CDATA[]]></testEvent>
</testEvents>
<patternDefinitions>
<pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern>
<pattern name="patStrColon"><![CDATA[[^:]*]]></pattern>
</patternDefinitions>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<_reptIp:gPatIpV4Dot>.* Cold Start Trap\(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr>.*Cold Start Trap \(<_idsev:gPatInt>\)<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<collectFieldsByRegex src="$hostName">
<regex><![CDATA[<_reptIp:gPatIpV4Dot>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<when test='matches($_reptIp, "^\w+:")'>
<collectFieldsByRegex src="$_reptIp">
<regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</when>
<when test='$_reptIp != "127.0.0.1"'>
<when test='$_reptIp != "0.0.0.0"'>
<setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute>
</when>
</when>
<collectAndSetAttrByKeyValuePair sep="\t\\| SNMP" src="$_body">
<attrKeyMap attr="oid" key="SNMPv2-MIB::snmpTrapOID.0 = OID: " />
<attrKeyMap attr="eventDetails" key="SNMPv2-SMI::enterprises.2020.1.0 = STRING: " />
<attrKeyMap attr="eventId" key="SNMPv2-SMI::enterprises.2020.2.0 = STRING: " />
<attrKeyMap attr="eventTime" key="SNMPv2-SMI::enterprises.2020.3.0 = STRING: " />
<attrKeyMap attr="hostIpAddr" key="SNMPv2-SMI::enterprises.2020.101.1.0 = STRING: " />
<attrKeyMap attr="hostName" key="SNMPv2-SMI::enterprises.2020.101.3.0 = STRING: " />
<attrKeyMap attr="severity" key="SNMPv2-SMI::enterprises.2020.101.4.0 = STRING: " />
<attrKeyMap attr="status" key="SNMPv2-SMI::enterprises.2020.101.2.0 = STRING: " />
</collectAndSetAttrByKeyValuePair>
<setEventAttribute attr="eventType">Pandora-PingUp</setEventAttribute>
<when test='$status = "New"'>
<setEventAttribute attr="eventType">Pandora-PingDown</setEventAttribute>
</when>
<when test='$status = "Clear"'>
<setEventAttribute attr="eventType">Pandora-PingUp</setEventAttribute>
</when>
</parsingInstructions>
2019-05-03 13:33:45 0.0.0.0TRAP2, SNMP v2c, community tek2020 . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.2020.101 SNMPv2-SMI::enterprises.2020.101.1.0 = STRING: "192.168.220.240" SNMPv2-SMI::enterprises.2020.101.2.0 = STRING: "New" SNMPv2-SMI::enterprises.2020.101.3.0 = STRING: "192.168.220.240" SNMPv2-SMI::enterprises.2020.101.4.0 = STRING: "Critical" CiscoMeraki FirewallANY<patternDefinitions>
<pattern name="patMerakiMod"><![CDATA[ip_flow]]></pattern>
</patternDefinitions>
<eventFormatRecognizer><![CDATA[(?:<:gPatMon>\s+<:gPatDay>\s+<:gPatTime>\s+<:gPatIpAddr>\s+|<:gPatSyslogPRI>)\d\s+\d+\.\d+\s+<:patMerakiMod>]]></eventFormatRecognizer>
<parsingInstructions>
<switch>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<_mon:gPatMon>\s+<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpAddr>\s+\d+\s+\d+\.\d+\s+<:gPatStr>\s+<_type:gPatStr>\s+<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_rawmsg">
<regex><![CDATA[<:gPatSyslogPRI>\d\s+\d+\.\d+\s+<:gPatStr>\s+<_type:gPatStr>\s+<_body:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
<setEventAttribute attr="eventType">Cisco-Meraki-Generic</setEventAttribute>
<collectAndSetAttrByKeyValuePair sep=" " src="$_body">
<attrKeyMap attr="_src" key="src="/>
<attrKeyMap attr="srcIpPort" key="sport="/>
<attrKeyMap attr="_dst" key="dst="/>
<attrKeyMap attr="destIpPort" key="dport="/>
<attrKeyMap attr="_mac" key="dhost="/>
<attrKeyMap attr="_mac" key="mac="/>
<attrKeyMap attr="_proto" key="protocol="/>
<attrKeyMap attr="_sig" key="signature="/>
<attrKeyMap attr="_severity" key="priority="/>
<attrKeyMap attr="_actionType" key="type="/>
<attrKeyMap attr="hostMACAddr" key="device="/>
<attrKeyMap attr="srcMACAddr" key="client_mac="/>
<attrKeyMap attr="_src" key="client_ip="/>
<attrKeyMap attr="wlanRadioId" key="radio="/>
<attrKeyMap attr="wlanChannelId" key="channel="/>
<attrKeyMap attr="durationMSec" key="duration="/>
<attrKeyMap attr="operationalState" key="state="/>
<attrKeyMap attr="msg" key="info="/>
<attrKeyMap attr="_isBadEntry" key="bad_entry="/>
<attrKeyMap attr="alarm" key="alarm_id="/>
<attrKeyMap attr="_src" key="ip_src="/>
<attrKeyMap attr="arpSrcIpAddr" key="arp_src="/>
<attrKeyMap attr="dnsServer" key="dns_server="/>
<attrKeyMap attr="_src" key="dhcp_ip="/>
<attrKeyMap attr="dhcpGateway" key="dhcp_server="/>
<attrKeyMap attr="dhcpServerMacAddr" key="dhcp_server_mac="/>
</collectAndSetAttrByKeyValuePair>
<when test="exist _actionType">
<setEventAttribute attr="eventType">combineMsgId("Cisco-Meraki-", $_actionType)</setEventAttribute>
<setEventAttribute attr="eventType">replaceStrInStr($eventType, "_", "-")</setEventAttribute>
</when>
<choose>
<when test='$_type = "urls"'>
<switch>
<case>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[request: <httpMethod:gPatWord> <infoURL:gPatStr>]]></regex>
</collectFieldsByRegex>
<setEventAttribute attr="eventType">Cisco-Meraki-WebTraffic-Permit</setEventAttribute>
<when test="exist infoURL">
<setEventAttribute attr="destName">extractHostFromURL($infoURL)</setEventAttribute>
</when>
</case>
<default/>
</switch>
</when>
<when test='$_type = "flows"'>
<choose>
<when test='matches($_body, "\ballow\b")'>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute>
</when>
<otherwise>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute>
</otherwise>
</choose>
<setEventAttribute attr="phEventCategory">4</setEventAttribute>
</when>
<when test='$_type = "security_event"'>
<choose>
<when test='matches($_body, "\ballow\b")'>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute>
</when>
<otherwise>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute>
</otherwise>
</choose>
<setEventAttribute attr="phEventCategory">4</setEventAttribute>
</when>
<when test='$_type = "airmarsahl_events"'>
<choose>
<when test='matches($_body, "\ballow\b")'>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Permit</setEventAttribute>
</when>
<otherwise>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute>
</otherwise>
</choose>
<setEventAttribute attr="phEventCategory">4</setEventAttribute>
</when>
<when test='$_type = "ids-alerts"'>
<switch>
<case>
<collectFieldsByRegex src="$_sig">
<regex><![CDATA[\d+:<_et:gPatInt>:\d+]]></regex>
</collectFieldsByRegex>
<setEventAttribute attr="eventType">combineMsgId("Snort-", $_et)</setEventAttribute>
</case>
<default/>
</switch>
<switch>
<case>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[message:\s+<msg:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
</case>
<default/>
</switch>
<choose>
<when test='$_severity = "1"'>
<setEventAttribute attr="eventSeverity">10</setEventAttribute>
</when>
<when test='$_severity = "2"'>
<setEventAttribute attr="eventSeverity">9</setEventAttribute>
</when>
<when test='$_severity = "3"'>
<setEventAttribute attr="eventSeverity">8</setEventAttribute>
</when>
<when test='$_severity = "4"'>
<setEventAttribute attr="eventSeverity">7</setEventAttribute>
</when>
<when test='$_severity = "5"'>
<setEventAttribute attr="eventSeverity">6</setEventAttribute>
</when>
<when test='$_severity = "6"'>
<setEventAttribute attr="eventSeverity">5</setEventAttribute>
</when>
<when test='$_severity = "7"'>
<setEventAttribute attr="eventSeverity">4</setEventAttribute>
</when>
<when test='$_severity = "8"'>
<setEventAttribute attr="eventSeverity">3</setEventAttribute>
</when>
<when test='$_severity = "9"'>
<setEventAttribute attr="eventSeverity">2</setEventAttribute>
</when>
<otherwise>
<setEventAttribute attr="eventSeverity">1</setEventAttribute>
</otherwise>
</choose>
</when>
<when test='$_type = "events"'>
<switch>
<case>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[dhcp lease of ip <srcIpAddr:gPatIpAddr> from server mac <_destMAC:gPatStr> for client mac <_srcMAC:gPatStr> from router <destIpAddr:gPatIpAddr> on subnet <dhcpSubnetAddr:gPatIpAddr> with dns <dnsServer:gPatIpAddr>]]></regex>
</collectFieldsByRegex>
<setEventAttribute attr="eventType">Cisco-Meraki-Events-dhcp-lease-extended</setEventAttribute>
<setEventAttribute attr="srcMACAddr">normalizeMAC($_srcMAC)</setEventAttribute>
<setEventAttribute attr="destMACAddr">normalizeMAC($_destMAC)</setEventAttribute>
</case>
<case>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[Site-to-site\s+VPN:\s*<:gPatStr>\s+negotiation\s+failed\s+due\s+to\s+time\s+up]]></regex>
</collectFieldsByRegex>
<setEventAttribute attr="eventType">Cisco-Meraki-Events-VPN-negotiation-time-up</setEventAttribute>
</case>
<case>
<collectFieldsByRegex src="$_body">
<regex><![CDATA[^content_filtering_block\s+<_fields:gPatMesgBody>]]></regex>
</collectFieldsByRegex>
<setEventAttribute attr="eventType">Cisco-Meraki-Flow-Deny</setEventAttribute>
<collectFieldsByKeyValuePair kvsep="=" sep=" " src="$_fields">
<attrKeyMap attr="infoURL" key="url"/>
<attrKeyMap attr="threatCategory" key="category0"/>
<attrKeyMap attr="_server" key="server"/>
</collectFieldsByKeyValuePair>
<when test="exist _server">
<switch>
<case>
<collectFieldsByRegex src="$_server">
<regex><![CDATA[^<destIpAddr:gPatIpAddr>(?::<destIpPort:gPatInt>)?$]]></regex>
</collectFieldsByRegex>
</case>
<default>
<setEventAttribute attr="destName">$_server</setEventAttribute>
</default>
</switch>
</when>
</case>
<default/>
</switch>
</when>
</choose>
<when test="exist _mac">
<setEventAttribute attr="hostMACAddr">normalizeMAC($_mac)</setEventAttribute>
</when>
<when test="exist _proto">
<switch>
<case>
<collectFieldsByRegex src="$_proto">
<regex><![CDATA[^<ipProto:gPatInt>$]]></regex>
</collectFieldsByRegex>
</case>
<default>
<setEventAttribute attr="ipProto">convertStrToIntIpProto($_proto)</setEventAttribute>
</default>
</switch>
</when>
<when test="exist _src">
<switch>
<case>
<collectFieldsByRegex src="$_src">
<regex><![CDATA[<srcIpAddr:gPatIpAddr>:<srcIpPort:gPatInt>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_src">
<regex><![CDATA[<srcIpAddr:gPatIpAddr>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
</when>
<when test="exist _dst">
<switch>
<case>
<collectFieldsByRegex src="$_dst">
<regex><![CDATA[<destIpAddr:gPatIpAddr>:<destIpPort:gPatInt>]]></regex>
</collectFieldsByRegex>
</case>
<case>
<collectFieldsByRegex src="$_dst">
<regex><![CDATA[<destIpAddr:gPatIpAddr>]]></regex>
</collectFieldsByRegex>
</case>
</switch>
</when>
<when test="exist _isBadEntry">
<choose>
<when test="exist operationalState"/>
<when test='$_isBadEntry = "false"'>
<setEventAttribute attr="operationalState">true</setEventAttribute>
</when>
<when test='$_isBadEntry = "true"'>
<setEventAttribute attr="operationalState">false</setEventAttribute>
</when>
</choose>
</when>
</parsingInstructions>
<134>1 1566237426.948970759 ip_flow_end src=172.16.3.252 dst=216.239.36.144 protocol=tcp sport=47287 dport=5061 translated_src_ip=10.242.252.54 translated_port=47287<134>1 1566237426.062588166 ip_flow_start src=172.16.6.153 dst=8.8.8.8 protocol=udp sport=57708 dport=53 translated_src_ip=10.242.254.6 translated_port=57708ZhonesMXK-F1419ANY<eventFormatRecognizer><![CDATA[SNMPv2-SMI::enterprises.5504]]></eventFormatRecognizer>
<patternDefinitions><pattern name="patStrRightParenthesis"><![CDATA[[^\)]*]]></pattern><pattern name="patStrColon"><![CDATA[[^:]*]]></pattern></patternDefinitions><parsingInstructions>
<switch><case><collectFieldsByRegex src="$_rawmsg"><regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<:gPatIpV4Dot>\(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]></regex></collectFieldsByRegex></case><case><collectFieldsByRegex src="$_rawmsg"><regex><![CDATA[<_year:gPatYear>-<_mon:gPatMonNum>-<_day:gPatDay>\s+<_time:gPatTime>\s+<hostName:gPatStr> <:gPatStr> \(via <_reptIp:patStrRightParenthesis>\)<_body:gPatMesgBody>]]></regex></collectFieldsByRegex></case></switch><setEventAttribute attr="deviceTime">toDateTime($_mon, $_day, $_year, $_time)</setEventAttribute>
<when test='matches($_reptIp, "^\w+:")'><collectFieldsByRegex src="$_reptIp"><regex><![CDATA[<:patStrColon>:\s+\[<_reptIp:gPatIpV4Dot>\]<:gPatMesgBody>]]></regex></collectFieldsByRegex></when><when test='$_reptIp != "127.0.0.1"'><when test='$_reptIp != "0.0.0.0"'><setEventAttribute attr="reptDevIpAddr">$_reptIp</setEventAttribute></when></when>
<collectAndSetAttrByKeyValuePair sep='\t\\| SNMP' src="$_body">
<attrKeyMap attr="_id" key="SNMPv2-MIB::snmpTrapOID.0 = OID: "/>
<attrKeyMap attr="_zhoneGponOltOpticAlarms" key="SNMPv2-SMI::enterprises.5504.5.14.1.20.1.6"/>
<attrKeyMap attr="_zhoneGponOltStatusWord" key="SNMPv2-SMI::enterprises.5504.5.14.1.20.1.7"/>
<attrKeyMap attr="_zhoneGponOmciOnuAlarmsText" key="SNMPv2-SMI::enterprises.5504.5.14.1.11.1.1"/>
<attrKeyMap attr="_zhoneOnuOmciImageUpgradeDownloadStatus" key="SNMPv2-SMI::enterprises.5504.5.14.1.19.1.12"/>
<attrKeyMap attr="_zhoneGponSerialNoVendorId" key="SNMPv2-SMI::enterprises.5504.5.14.1.5.1.3"/>
<attrKeyMap attr="_zhoneGponSerialNoVendorSpecific" key="SNMPv2-SMI::enterprises.5504.5.14.1.5.1.4"/>
<attrKeyMap attr="_zhoneGponOltOnuConfigModel" key="SNMPv2-SMI::enterprises.5504.5.14.1.2.1.19"/>
<attrKeyMap attr="_zhoneGponOnuStatusWord" key="SNMPv2-SMI::enterprises.5504.5.14.1.7.1.1"/>
</collectAndSetAttrByKeyValuePair>
<choose>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.6"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOltOpticsAlarmsTrap</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.10"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOltStatusWordTrap</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.4"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOmciOnuAlarmsTrap</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.5"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOmciOnuDownloadStatusChange</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.11"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuAutoAssign</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.7"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuError</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.3"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponOnuLineStatusChange</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.8"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponRogueOnuTrap</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.9"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponRssiRogueOnuTrap</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.1"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponSerialNumberFound</setEventAttribute></when>
<when test='$_id = "SNMPv2-SMI::enterprises.5504.5.14.1.6.0.2"'><setEventAttribute attr="eventType">Zhones-Gpon-zhoneGponSerialNumberLost</setEventAttribute></when>
</choose>
</parsingInstructions>2019-12-31 00:04:26 0.0.0.0INFORM, SNMP v2c, community aarpnet . Cold Start Trap (0) Uptime: 0:00:00.00 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (3402597326) 393 days, 19:39:33.26 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-SMI::enterprises.5504 SNMPv2-SMI::enterprises.5504.5.14.1.20.1.6 = INTEGER: 1 SNMPv2-SMI::enterprises.5504.5.14.1.5.1.3 = INTEGER: 3 SNMPv2-SMI::enterprises.5504.5.14.1.2.1.19 = INTEGER: 2