Skip to main content
Active IQ Unified Manager 9.16

Storage VM events

Contributors netapp-pcarriga netapp-manini

Storage VM (storage virtual machine, also known as SVM) events provide you with information about the status of your storage VMs (SVMs) so that you can monitor for potential problems. Events are grouped by impact area and include the event and trap name, impact level, source type, and severity.

An asterisk (*) identifies EMS events that have been converted to Unified Manager events.

Impact area: availability

Event name (Trap name) Impact level Source type Severity

Storage VM CIFS Service Down(ocumEvtVserverCifsServiceStatusDown)

Incident

SVM

Critical

SVM CIFS Service Not Configured(Not applicable)

Event

SVM

Information

Attempts to Connect Nonexistent CIFS Share *(nbladeCifsNoPrivShare)

Incident

SVM

Critical

CIFS NetBIOS Name Conflict *(nbladeCifsNbNameConflict)

Risk

SVM

Error

CIFS Shadow Copy Operation Failed *(cifsShadowCopyFailure)

Risk

SVM

Error

Many CIFS Connections *(nbladeCifsManyAuths)

Risk

SVM

Error

Max CIFS Connection Exceeded *(nbladeCifsMaxOpenSameFile)

Risk

SVM

Error

Max Number of CIFS Connection Per User Exceeded *(nbladeCifsMaxSessPerUsrConn)

Risk

SVM

Error

SVM FC/FCoE Service Down(ocumEvtVserverFcServiceStatusDown)

Incident

SVM

Critical

SVM iSCSI Service Down(ocumEvtVserverIscsiServiceStatusDown)

Incident

SVM

Critical

Storage VM NFS Service Down(ocumEvtVserverNfsServiceStatusDown)

Incident

SVM

Critical

SVM FC/FCoE Service Not Configured(Not applicable)

Event

SVM

Information

SVM iSCSI Service Not Configured(Not applicable)

Event

SVM

Information

SVM NFS Service Not Configured(Not applicable)

Event

SVM

Information

Storage VM Stopped(ocumEvtVserverDown)

Risk

SVM

Warning

AV Server too Busy to Accept New Scan Request *(nbladeVscanConnBackPressure)

Risk

SVM

Error

No AV Server Connection for Virus Scan *(nbladeVscanNoScannerConn)

Incident

SVM

Critical

No AV Server Registered *(nbladeVscanNoRegdScanner)

Risk

SVM

Error

No Responsive AV Server Connection *(nbladeVscanConnInactive)

Event

SVM

Information

Unauthorized User Attempt to AV Server *(nbladeVscanBadUserPrivAccess)

Risk

SVM

Error

Virus Found By AV Server *(nbladeVscanVirusDetected)

Risk

SVM

Error

Impact area: configuration

Event name (Trap name) Impact level Source type Severity

SVM Discovered(Not applicable)

Event

SVM

Information

SVM Deleted(Not applicable)

Event

Cluster

Information

SVM Renamed(Not applicable)

Event

SVM

Information

Impact area: performance

Event name (Trap name) Impact level Source type Severity

SVM IOPS Critical Threshold Breached(ocumSvmIopsIncident)

Incident

SVM

Critical

SVM IOPS Warning Threshold Breached(ocumSvmIopsWarning)

Risk

SVM

Warning

SVM MB/s Critical Threshold Breached(ocumSvmMbpsIncident)

Incident

SVM

Critical

SVM MB/s Warning Threshold Breached(ocumSvmMbpsWarning)

Risk

SVM

Warning

SVM Latency Critical Threshold Breached(ocumSvmLatencyIncident)

Incident

SVM

Critical

SVM Latency Warning Threshold Breached(ocumSvmLatencyWarning)

Risk

SVM

Warning

Impact area: security

Event name (Trap name) Impact level Source type Severity

Audit Log Disabled(ocumVserverAuditLogDisabled)

Risk

SVM

Warning

Login Banner Disabled(ocumVserverLoginBannerDisabled)

Risk

SVM

Warning

SSH is Using Insecure Ciphers(ocumVserverSSHInsecure)

Risk

SVM

Warning

Login Banner Changed(ocumVserverLoginBannerChanged)

Risk

SVM

Warning

Storage VM anti-ransomware monitoring is Disabled (antiRansomwareSvmStateDisabled)

Risk

SVM

Warning

Storage VM anti-ransomware monitoring is Enabled (Learning Mode) (antiRansomwareSvmStateDryrun)

Event

SVM

Information

Storage VM suitable for anti-ransomware monitoring (Learning Mode) (ocumEvtSvmArwCandidate)

Event

SVM

Information