Administer > Configure Incidents > Manage Incidents Using Incident Configurations > About Custom Incident Attributes for an Incident > Custom Incident Attributes Provided by NNMi

Custom Incident Attributes Provided by NNMi (Information for Administrators)

NNMi uses custom incident attributes to attach additional information to incidents.

A subset of CIAs is available for any particular incident. Any relevant CIAs are displayed in the Incident form, on the Custom Attributes tab. There are two categories of possible CIAs: 

  1. Custom incident attributes

    • Provided by NNMi

    • Provided for NNM iSPI Performance for Metrics.

      Requires Network Node Manager iSPI Performance for Metrics Software (NNM iSPI Performance for Metrics). To populate performance data in the dashboard views or enhance NNM iSPI Performance for Metrics reports by sharing NNMi configuration settings, install the optional Network Performance Server (NPS).

  2. SNMP trap varbinds

    Identified by the Abstract Syntax Notation value (ASN.1). Varbinds are defined in MIB files that you can load into NNMi. See Load SNMP Trap Incident Configurations.

The following tables explain the custom incident attributes provided by NNMi.

Custom Incident Attributes Provided by NNMi
Name Description
cia.address

This attribute value is determined by the com.hp.nnm.trapd.useUdpHeaderIpAddressproperty defined in the following file (see Manage environment variables for more information):

Windows:

%NnmDataDir%\shared\nnm\conf\props\nms-jboss.properties

Linux:

$NnmDataDir/shared/nnm/conf/props/nms-jboss.properties

When com.hp.nnm.trapd.useUdpHeaderIpAddress=true, the cia.address value is the User Datagram Protocol (UDP) header IP Address.

When com.hp.nnm.trapd.useUdpHeaderIpAddress=false, both the cia.address and cia.originaladdress values contain the SNMP Agent IP Address. The com.hp.nnm.trapd.useUdpHeaderIpAddress property is false by default.

See the "Maintaining NNMi" chapter in the Network Node Manager i Software Deployment Reference for more information.
cia.originaladdress

This attribute value is determined by the com.hp.nnm.trapd.useUdpHeaderIpAddressproperty defined in the following file (see Manage environment variables for more information):

Windows:

%NnmDataDir%\shared\nnm\conf\props\nms-jboss.properties

Linux:

$NnmDataDir/shared/nnm/conf/props/nms-jboss.properties

This Custom Incident Attribute enables you to access both the User Datagram Protocol (UDP) header IP Address and the SNMP Agent IP Address of the managed device.

When com.hp.nnm.trapd.useUdpHeaderIpAddress=true, cia.originaladdress is the value of the SNMP Agent IP Address and the cia.address value is the User Datagram Protocol (UDP) header IP Address.

When com.hp.nnm.trapd.useUdpHeaderIpAddress=false, both cia.originaladdress and cia.address values contain the SNMP Agent IP Address. The com.hp.nnm.trapd.useUdpHeaderIpAddress property is false by default.

See the "Maintaining NNMi" chapter in the Network Node Manager i Software Deployment Reference for more information.
cia.agentAddress The IP Address that is stored in the SNMPv1 trap data for the SNMP Agent that generated the trap.
cia.custompoller.mibInstance

Instance number used to identify the row in the MIB table that contains the MIB value.

Tip You can use this CIA in the Message Format for a Custom Poller incident.
cia.custompoller.instanceDisplayValue

Value that results from the Instance Display Configuration.

Tip You can use this CIA in the Message Format for a Custom Poller incident.

See MIB Expressions Form (Custom Poller) for more information.
cia.custompoller.instanceFilterValue

The instance of the MIB Variable after the MIB Filter is applied to the nodes in the specified Node Group.

Tip You can use this CIA in the Message Format for a Custom Poller incident.

The MIB Filter Variable is specified when configuring a Custom Poller Collection. The MIB Filter is specified when configuring a Custom Poller Policy for the collection. See Create a Custom Poller Collectionand Create a Policy for more information.

cia.cardsRemoved Comma-separated list of removed card names used for formatting the Card Removed incident message.
cia.cardsInserted Comma-separated list of the inserted card names used for formatting the Card Inserted incident message.
cia.custompoller.collection The Name of the associated Custom Poller Collection.
cia.custompoller.lastValue The last polled value that caused a state change which generated the incident.
cia.custompoller.policy The Name of the associated Custom Poller Policy.
cia.custompoller.variable.description The description of the MIB expression being polled.
cia.custompoller.variable.expression The MIB expression that was collected and the computed value that caused the incident.
cia.custompoller.variable.name The Name of the MIB expression variable that caused the incident.
cia.custompoller.state The state of the Custom Polled Instance for this incident.
cia.incidentDurationMs

The time measured in milliseconds between when NNMi detected a problem with one or more network devices to the time the problem was resolved.

Use this CIA to track the total time a particular object in the network was down or unavailable.

Note This CIA is used only when NNMi's Causal Engine has analyzed and Closed the incident. Any time an incident is closed manually (for example, by the network operator), NNMi does not include cia.incidentDuration.
cia.internalAddress

If static Network Address Translation (NAT) is part of your network management domain, and the NNMi management server is outside of that static NAT domain, the NNMi administrator can configure this attribute to show the internal IP address that is mapped to the external management address of the selected incident's Source Node.

Note The external management IP addresss (public address) must be mapped to this internal address (such as private IPv4 address) using the Overlapping IP Address Mapping Form. See Overlapping Address Mapping Form for more information. For more information about Overlapping IP Addresses in an NNMi network see Overlapping Address Mapping.
cia.island.name

Name NNMi uses to identify the nodes contained in the island.

NNMi administrators can use this cia value in Launch Actions to display the associated table view or topology map.

To launch the associated topology map, use the following syntax for the Launch Action Full URL attribute value:

http://<serverName>:<portNumber>/nnm/launch?cmd=showNodeGroup&name=${cias[name=cia.island.name].value

To launch the associated table view, use the following syntax for the Launch Action Full URL attribute value:

http://<serverName>:<portNumber>/nnm/launch?cmd=showView&view=allNodesTableView&nodegroup=
${cias[name=cia.island.name].value}

See Configure Launch Actions and Attributes per Object Type for Full URLs for more information.
cia.island.numberOfNodes Number of nodes contained in the island. Use this number to determine the effect of the associated Island Down incident.
cia.reasonClosed

The Conclusion information identifying the reason NNMi changed the incident's Lifecycle State to Closed. For example, NNMi might include an Interface Up Conclusion as the reason an Interface Down incident was closed.

Note This CIA is used when NNMi's Causal Engine has analyzed and Closed the incident. Software that is integrated with NNMi might also provide values for cia.reasonClosed. Any time an incident is closed manually (for example, by the network operator), NNMi does not include cia.reasonClosed.
cia.remotemgr

Hostname or IP address of the (NNMi Advanced - Global Network Management feature) NNMi Regional Manager that is forwarding the event
cia.securityGroup.name

Name value for the Security Group. See Configure Security Groups (Security Group Form) for more information.

Note This CIA does not appear if the node is assigned to the Default Security Group provided by NNMi.
cia.securityGroup.uuid

UUID value for the Security Group. See Configure Security Groups (Security Group Form) for more information.

Note This CIA does not appear if the node is assigned to the Default Security Group provided by NNMi.
cia.snmpoid SNMP trap object identifier.
cia.sourceNodeLongName Fully qualified DNS name for the incident's Source Node.
cia.tenant.name

Name value for the Tenant. See Use the Tenant Form for more information.

Note This CIA does not appear if the node is assigned to the Default Tenant provided by NNMi.
cia.tenant.uuid

UUID value for the Tenant. See Use the Tenant Form for more information.

Note This CIA does not appear if the node is assigned to the Default Tenant provided by NNMi.
cia.timeIncidentDetectedMs

The timestamp in milliseconds when NNMi first detected the problem associated with an incident.

Note This CIA is used only when NNMi's Causal Engine has analyzed and Closed the incident. Any time an incident is closed manually (for example, by the network operator), NNMi does not include cia.timeIncidentDetected.
cia.timeIncidentResolvedMs

The time when NNMi determines the problem associated with the incident is resolved.

Note This CIA is used only when NNMi's Causal Engine has analyzed and Closed the incident. Any time an incident is closed manually (for example, by the network operator), NNMi does not include cia.timeIncidentResolved.

NNM iSPI Performance for Metrics Custom Incident Attributes

(NNM iSPI Performance for Metrics) For network performance monitoring, additional custom incident attributes are provided for your use. ClosedClick here for more information.

Many incidents are candidates for these custom incident attributes: Concept Link IconSee Also

Information about configuring thresholds is in the following topics:

Custom Incident Attributes Provided for Thresholding
Name Description
cia.thresholdParameter The Monitored Attribute that is being measured in the threshold's configuration settings. For example, Input Utilization.
cia.thresholdLowerBound The configured value that when crossed indicates a low threshold situation.
cia.thresholdUpperBound The configured value that when crossed indicates a high threshold situation.
cia.thresholdPreviousValue Threshold results from the previous Polling Interval. For example, the threshold results might change from Nominal to High, based on a change in the cia.thresholdMeasuredValue.
cia.thresholdCurrentValue Threshold results from the most recent Polling Interval. For example, High.
cia.thresholdMeasuredValue The most recent value of the Measured Attribute being monitored according to this threshold's criteria settings. This measurement is the average of all measurements taken during the last polling interval (determined by the NNMi State Poller).
cia.thresholdMeasurementTime The time at which the threshold was crossed. The time appears in ISO 8601 format.

 

These CIAs are used in a variety of ways:

Send Help Center feedback