Getting a Quick Start with NerveCenter - Working with Behavior Models - Understanding Behavior Models -
Working with Behavior Models      How Behavior Models Operate

Understanding Behavior Models

To work with behavior models, you need to understand a behavior model's components and how they interact.

A behavior model is not a NerveCenter object. Rather, it is a construct that relies on the interaction of associated NerveCenter objects to detect and handle specific network behavior. NerveCenter uses the following objects to define behavior models:

NerveCenter Objects Used with Behavior Models

Object Description

Node

Represents either a workstation, server, or a network device, such as a router, hub, or bridge.

Property

A text string that describes the type of node or one of the node's MIB objects. Polls and alarms use properties to target specific nodes. Assigning a node to a property group that contains multiple properties allows the node to be targeted by multiple behavior models.

Poll

Periodically solicits SNMP values from the agents running on targeted nodes and fires a trigger when specified conditions are met. Polls can fire multiple triggers, which are detected by one or more alarms.

Trap mask

Detects a predefined type of SNMP trap. Trap masks can define generic and specific traps as well as traps coming from certain types of devices or whose contents match user-specified criteria. A trap mask fires a trigger when the specified type of trap is detected.

Alarm

Receives triggers, correlates one or more detected network events, and tracks each event instance. Alarms can include automated actions, which fall into four categories: notifying, logging, triggering other alarms, and correcting network conditions. Actions can also be performed conditionally using NerveCenter's Action Router.



Working with Behavior Models How Behavior Models Operate
29 July 2003