Using Threshold Manager

Threshold Manager provides an easy-to-use interface to access device-specific threshold settings. Using Threshold Manager, you can set thresholds for network devices using Cisco-provided, predefined default policies. These policies can be applied automatically to target devices. Threshold Manager also supports detailed customization of threshold settings.

For a list of supported devices, refer to the README file and the release note. Threshold Manager also has online help available.

This chapter provides the following sections:

To access Threshold Manager from CiscoView, complete the following steps:

Step 1   Go to CiscoView - Main window.

Step 2   Select File>Open Device.

Step 3   Enter the IP Address or Host Name of the Threshold Manager in the Host field.

Step 4   Enter the Read Community string.

Step 5   Enter the Write Community string.

Step 6   Click OK.

Step 7   Select Tools>Threshold Manager from the CiscoView menu bar.

The Threshold Manager Events List window appears.

There are two types of policy files available in Threshold Manager, a default policy and a customized policy.

Each event occupies a single line in the Events List window and displays until one of the following situations occurs:

The managing events section includes the following topics:

Each entry threshold in the event list contains the following fields associated with a policy:

You can sort the event list by clicking on the field headers. You can also change the width of the columns by clicking on the dividers between the field headers and stretching the column to the desired size. Press the Shift key and click the middle mouse button while dragging the divider.

It allows you to easily view all information pertaining to a specific event. You use the Single Event View window to determine what threshold settings in the RMON agent generated the event.

The Single Event View window is divided into two panes: Profile Identification and Agent Log Information.

If the threshold settings were created by a Threshold Manager policy file, the values from that policy file are displayed. If no policy file is associated with the threshold settings, the fields remain blank.

Because the Agent Log Information contains information from the RMON agent log in the managed device, these values display whether or not a Threshold Manager policy file can be associated with the event.

• When you launch an instance of Threshold Manager.
  
  
• At the end of the refresh interval.
  
  
• When you request a retrieve operation.
  
  

When the application is operational, Threshold Manager automatically retrieves events from the RMON log at regular intervals. This interval is defined by the refresh timer parameter associated with that instance of Threshold Manager. This parameter is defined when you initiate a Threshold Manager session. The default value is 360 seconds. If the refresh timer is set to 0, the Threshold Manager will not automatically retrieve events from the RMON agent.

Threshold Manager allows you to change the order in which you view events in the Events List window. This capability permits you to view events in a manner that is most meaningful to you. You can reorder the following fields:

• Log Time—descending alpha-numeric
  
  
• Profile—ascending alphabetic
  
  
• Description—ascending alphabetic
  
  
• Alarm Variable—ascending alphabetic
  
  
• Priority—ascending numeric
  
  
• Log Description—ascending alphabetic
  
  
• eventIndex—ascending numeric
  
  
• logIndex—ascending numeric
  
  
• Owner—ascending alphabetic
  
  

Step 1   Open the Threshold Manager window.

Step 2   Make sure your printer is setup properly for the host system.

Step 3   Select File>Print to print out events in the window.

Step 4   Enter the name of the printer in the Print dialog.

Step 5   Click OK to print the events.

Because events can be deleted from the log, printing lets you maintain an historical log of device activity. This log is also helpful in accumulating data to determine your network baselines and performance trends. The printed version of the Event List window contains the information described in "Viewing Threshold Events."

Step 1   Highlight the event to be deleted by selecting it from any field within the Events List window.

Step 2   Select Delete>Delete Selected Events.

To delete all events from the RMON agent log:

Step 1   Select Delete>Delete All Events.

You can also delete selected events from the single event view window.

Any user who has launched an instance of Threshold Manager against a device can delete events from that RMON agent log. This means that your Events List window might not display the current contents of the RMON agent log of a device if that device is being managed by more than one Threshold Manager. Your Events List window reflects the change when:

• You delete an event using Threshold Manager.
  
  
• Threshold Manager automatically updates the window at the end of the refresh interval.
  
  
• You force a retrieve operation using the Retrieve Events command.
  
  

Threshold Manager allows you to delete selected events or all events in the log. When you delete a selected event, all events with the same eventIndex value are removed from the RMON log.

• Manipulate current threshold settings and policies.
  
  
• Create new policies.
  
  
• Obtain current information about the managed device.
  
  
• Change the target device for this instance of Threshold Manager.
  
  

The Managing Thresholds section covers the following topics:

The content of this pane is specific to the instance of Threshold Manager and is visible only at your local machine.

This pane also that allows you to:

• View the default policies.
  
  
• Add selected or all policies to the Current Threshold Settings pane.
  
  
• Modify an existing policy.
  
  
• Create a new policy.
  
  

For more information on the policies, see "Using Policy Files" later in this chapter.

If Threshold Manager created the threshold settings, the fields displayed in the Current Threshold Settings pane will contain data provided by the policy file. If Threshold Manager did not create the policy or Threshold Manager cannot associate a policy with an event, then only the information provided by the RMON agent will display.

• Manipulate current threshold settings and policies.
  
  
• Create new policies.
  
  
• Obtain current information about the managed device.
  
  
• Change the target device for this instance of Threshold Manager.
  
  

To access the Configure Threshold dialog box, select Config>Thresholds...

This device information is changed from the Properties dialog box. The Properties dialog box lets you

Go to the Event List window and select Config>Properties to access the Properties dialog box.

To add all policies in the Policies pane to the Current Threshold Settings pane, select the Add All Policy button.

To add selected policies to the Current Threshold Settings pane:

• Click once on the selected policy.
  
  
• Select the Add Selected Policy button.
  
  
• To add multiple selected policies.
  
  
• Click once on the policy at the beginning of the range of selected policies.
  
  
• Hold down the shift key.
  
  
• Click once on the policy at the end of the range of selected policies.
  
  

A policy added to the Current Threshold Settings pane retains a pending status. The pending status does not change until you enforce the threshold settings to the RMON agent. Threshold settings with a pending status are viewable only from your local machines.

Step 1   Go to the Configure Thresholds window.

Step 2   Go to the Current Threshold Settings pane.

Step 3   Double Click on the selected threshold setting.

The Modify Threshold Settings dialog box appears. In this window you can do the following:

• Increase or decrease the threshold parameters.
  
  
• Change the Sampling Type to absolute or delta.
  
  
• Indicate the Startup Alarm as rising or falling.
  
  
• Specify the rising event notification as log, trap, or both.
  
  
• Specify the falling event notification as log, trap, or both.
  
  
• Modify the name of the policy owner.
  
  
• Change the Event Community string to that of the managed device.
  
  
• Delete a existing threshold settings or enforce the changes.
  
  

Threshold Manager lets you modify existing threshold settings. This feature lets you temporarily alter threshold settings for an Alarm object instance. This is useful when you want to monitor network performance for a specific period of time or to fine-tune threshold settings before permanently applying them. Changes to existing threshold settings are not saved in the associated policy file. Therefore, if the device loses power or is shut down, the modifications to the threshold settings are lost. If you want to make permanent changes to the threshold settings, alter the associated policy file and add the new threshold settings to the Current Threshold Settings pane.

You can alter a threshold setting that has a pending or active status. A threshold setting with a failed status indicates the threshold setting was rejected by the RMON agent and cannot be altered.

To delete selected threshold settings, regardless of status:

• Click once on the threshold setting.
  
  
• Select the Delete Selected button.
  
  

To delete more than one threshold setting, regardless of status:

• Click once on the threshold setting at the beginning of the desired range.
  
  
• Hold down the shift key.
  
  
• Click once on the threshold setting at the end of the desired range.
  
  
• Select the Delete Selected button.
  
  

Select the Delete All button, to remove all threshold settings, regardless of status

Threshold settings with a pending status are removed from the Current Threshold Setting pane when you:

• Delete them.
  
  
• Retrieve threshold settings from the RMON agent.
  
  
• Exit the Config Threshold dialog box.
  
  

Topics covered in this section include:

In order to understand the meaning of policies and to simplify file parsing process, Threshold Manager imposes strict rules whenever a policy file is created either manually or through the Create Policy dialog in Threshold Manager. It is highly recommended that you create customized policy files by using the Threshold Manager graphic user interface.

The order of the keyword-value pair is not important. All white spaces are ignored by the Threshold Manager during file parsing. If a keyword appears more than once, the last keyword-value pair takes effect. The only exception to this rule is keyword Interface_Threshold.

The syntax of this special keyword-value pair is as follows:

where interface_speed is optional.

Threshold Manager uses the interface-specific policy to set thresholds for the interface type involved. If the interface speed is specified in the policy, the policy is applied to interfaces that match both the interface type and speed. If interface speed is not present, the policy is applied to the interface that matches the specified interface type, regardless of its speed. The default policy is used to set thresholds for interfaces without an interface-specific policy defined.

Policy files are grouped into three types: global, device class, and host. All policy files are saved under the config directory of the Threshold Manager. Policy files under the config directory are global policy files and are used for all devices. Policy file under the device class sub-directory apply to devices that belong to the same device class family. Policy files that are saved in the host sub-directory are used to set threshold against only the specific host.

When reading policies for a given device, Threshold Manager first searches that host sub-directory to locate any host-specific policy files defined for that device, then it scans the device class sub-directory for policy files defined for that device class, and finally it picks up any policy files not defined elsewhere.

• Config Directory
  
  

Double click on the selected policy in the policy pane to activate the Modify Threshold Policy dialog box. From this window, you can:

• Increase or decrease the threshold parameters.
  
  
• Change the Sampling Type to absolute or delta.
  
  
• Indicate the StartUp Alarm as rising or falling.
  
  
• Specify the rising event notification as log, trap, or both.
  
  
• Specify the falling event notification as log, trap, or both.
  
  
• Alter the event priority.
  
  
• Modify the name of the policy file owner.
  
  
• Change the Event Community string to that of the managed device.
  
  

When you complete the modifications to the policy file, you can save the changes in the host-specific, device class, or global directories. Saving a policy file automatically updates the existing policy file in the Policies pane. Selecting the Continue button will directly apply the altered policy to the Current Threshold Settings pane without saving the changes.

You create new threshold policies to:

• Set new thresholds for an Alarm Object Identifier.
  
  
• Define configuration files for Alarm Object Identifiers supported by the RMON agent but not covered by an existing policy.
  
  
• Apply new thresholds to one or more interfaces on a device.
  
  

Cisco maintains a list of all SNMP MIBs supported by IOS version 10.2 and later. This list can be found at:

  ftp://ftp.cisco.com/pub/mibs/supportlists/

The SNMP MIBs are organized by device class for both routers and switches.

The Create Threshold Policy window provides the following fields:

• Profile indicates the name of the profile to which the new policy file will belong. The value of this field is customized and cannot be altered.
  
  
• Policy Description is a string of any alphanumeric characters used to describe the policy file. You must enter a value in this field.
  
  
• Alarm Object uniquely identifies the threshold variable. You must enter a value in this field. You may or may not have to qualify the instance id depending on the value of the next field.
  
  
• Target type defines how Threshold Manager manipulates the Alarm Object ID. If this value is one of the five Threshold Manager target types, you do not have qualify the instance identifier for the OID. These target types are known variables to Threshold Manager and the application provides the mechanism to access the instance identifier of the object in the SNMP MIB. If you define this value as customized, you must provide the instance identifier for the Alarm Object.
  
  
• Alarm Variable is a string of any alphanumeric characters representing the name of the SNMP MIB object. If the policy file is saved, the value of this field is used as the policy file name.
  
  

The Create Threshold Policy dialog box lets you define the:

• Sampling Interval sets the minimum and maximum values for the boundaries of the sampling interval. This value is measured in seconds.
  
  
• Rising and falling thresholds for the sampled data. You must enter a value in these fields.
  
  
• Interface Type determines the type of physical interface against which the threshold settings are applied. You can define multiple interface specific thresholds within a single policy file.This field is optional and may be used only if the variable is part of an interface table or the Ethernet statistical table.
  
  
• Interface Speed used to calculate the line usage. Like the Interface Type, this field applies only to interface-type variables and is optional.
  
  
• Interface List indicates the specific threshold values for each interface you selected.
  
  
• Sampling Type.
  
  
• StartUp Alarm.
  
  
• Rising and Falling Event types.
  
  
• Event Priority.
  
  
• Owner Identification.
  
  
• Event Community.
  
  

  The syntax of the Interface_Threshold keyword is:

  <interface type>:<rising threshold value>:<falling threshold value>:<interface speed>

  The following is an example of the Interface_Threshold keyword and value:

Policy configuration files are secured using the standard file security procedures in the host operating system.

After you create a policy file, you can:

• Save the policy file.
  
  
• Apply the policy file to one or more interfaces.
  
  
• Add the policy file as a current threshold setting.
  
  

You can save a threshold policy file in the host-specific, device class, or global directory. Remember that the host-specific directory takes on the name of the managed device. This name can be the host name or IP address of the device, depending on how you identified the device when you launched Threshold Manager. Policy files previously saved under the host name of a device will not appear in the Policies pane if you specify the IP address of the managed device when you launch Threshold Manager.

You cannot save a policy file that has a customized target type.

If the policy file is of an interface variable type, you can apply the threshold settings to one or more interfaces.

You can also add a policy file directly as a threshold setting without saving it to disk. This feature lets you create and add temporary threshold settings. However, there is no permanent record of these policies. The threshold settings are lost when the managed device is turned off or goes down, or when you delete the threshold settings from Threshold Manager.

Select the Continue button after creating the policy file to add it to the Current Threshold Settings pane as a threshold setting. The newly added threshold setting will have a status of pending.

To add multiple interface threshold settings within a single policy file:

Step 1   Define the first set of threshold parameters.

Step 2   Select the interface type of the target interface.

Step 3   Click on the Add button to add the interface type with its configured threshold settings to the Interface List.

Step 4   Define the next set of threshold parameters.

Step 5   Select the target interface type and add it to the interface list.

Repeat Steps 4 and 5 as many times as necessary.

After you have defined each specific threshold setting, you can apply it to one or more physical interfaces. Select the Continue button to access the Interface Selection dialog box. This screen displays all available interfaces in an up state for that device. Select the desired interfaces and click the OK button to apply the threshold settings to the physical interfaces. This action will also place the threshold settings in the lower pane of the Configure Threshold window with a status of pending.

The policies are located in the Threshold-Mgr /Config directory. Depending on how you saved the policy file, it can be found in one of the following subdirectories:

• Global
  
  
• Device Class
  
  
• Host-specific
  
  

All default policies in this release of Threshold Manager are found in the global directory.

/CWW/etc/cview/devices/Threshold-Mgr/

For descriptions of the other input fields in this window, see the section "Viewing Device Properties" earlier in this chapter.

To filter one or more profiles:

• Highlight the desired profiles in the Show Profile window.
  
  
• Select the right arrow.
  
  

Profiles appearing in the Hide Profile panes are no longer available to this instance of Threshold Manager and policy files contained in these profiles will not display in the Policies pane of the Configure Threshold window. However, any threshold settings active in the RMON agent that belong to the filtered profile are not affected.