How can I verify that the AppManager for HP OpenView Connector is sending events? (NETIQKB73047)

How can I verify that the AppManager for HP OpenView Connector is sending events?

Events forwarded by the HP OpenView connector are not appearing in OpenView.

How can I track an event through the connector logs?

First off, the logs contain a date value on each line that is in UTC format. This value can be converted to a regular date string in GMT by using the following statement in SQL Management Studio:

SELECT DATEADD(s,1308079632,'1/1/1970')

In this statement, the value 1308079632 is the date stamp taken from the log.

To successfully track the event(s), you will need to obtain the CHILD Event ID from AppManager's Consoles.  This Event ID value will appear in the logs as the event is processed.

The logs we are concerned with are msadpt.log and msadpt_ito.log.

• Msadpt.log shows the connector foundation as it received and formats the incoming event, preparing to send it through the HP Connector.
• Msadpt_ito.log shows the actual operation where the event is delivered.

In this example, we are looking for Parent Event Id 269477, Child Event Id 341273

The following is from msadpt.log for this event:

1308079632 [5868] EventXMLToPlainText::ConvertXMLToPlainText failed converting Physical Disk 2.1 has a predictive failure error and should be replaced. The disk is at controller/box 2, bay 2. XML
1308079632 [5868] MSAdptSendEvent:: Physical Disk 2.1 has a predictive failure error and should be replaced. The disk is at controller/box 2, bay 2. szAgentMsg and plaintext Physical Disk 2.1 has a predictive failure error and should be replaced. The disk is at controller/box 2, bay 2.
1308079632 [5868] MSAdptSendEvent::Send called for Jobid[35713], szMachineName[AGENT1], szKpName[5089:CIM_ArrayPhysicalDiskStatus], szEventMsg[Physical Disk 2.1 degraded], dwParentEventId[269477], dwEventId[341273], dwOccurence[1], szMSName[MSSERVER1], szSQLServer[QDBSERVER1], szRPName[QDB], return value[0]

 

This entry shows the event being received by the connector, and processed through an XML-to-plain text filter.
As the event is likely NOT in XML format, this operation "Fails", though that doesn't prevent delivery.
We then consider the Time stamp on these lines, 1308079632, and look at the msadpt_ito.log for the same time:

1308079632 [5868] AdptSend:Entering:341273
1308079632 [5868] AdptSend:KSGroup removed 5089:CIM_ArrayPhysicalDiskStatus is now CIM_ArrayPhysicalDiskStatus
1308079632 [5868] ItoSeverity:Entering
1308079632 [5868] ItoSeverity:Exiting:128
1308079632 [5868] ItoFilter:Entering
1308079632 [5868] ItoFilter:Exiting:'CIM'
1308079632 [5868] AdptSend:[0]opcmsg (128, CI Wintel, AGENT1, Physical Disk 2.1 degraded : Physical Disk 2.1 has a predictive failure error and should be replaced. The disk is at controller/box 2, bay 2., WindowsH1, MSSERVER1)
1308079632 [5868] AdptSend:Exiting

Notice in these lines that the Adapter sends the event via opcmsg to OpenView.
As there is no delivery confirmation, it is up to the receiving end to verify that the event was received.  This does, however, confirm that the connector SENT the message.

The following process can be used to trace an event through the connector logs to verify that the connector has SENT the event. Please note that the connector cannot verify that the delivery was received by the target system. It only "forwards and forgets".

Formerly known as NETIQKB73047