More discussions in Orion Network Performance MonitorWhere is this place located?
4 Replies Latest reply: Jul 29, 2011 10:55 AM by profzoom1 RSS

Help with alert based on a snmp trap

profzoom1
profzoom1 Jul 27, 2011 2:31 PM
Currently Being Moderated

I am trying to setup a trap to just capture this 1 event and I am not having any luck so far with filtering for 1 condition.

I am trying to alert off of the trap below

07/26/2011 21:05 : I3IC-MIB:i3IcTraps.0.5 SNMP Trap
Received Time:7/26/2011 9:05:34 PM
Source:X.X.X.X(relsX)
Community:Word

Variable Bindings
sysUpTime:= 5 minutes 41.72 seconds (34172)
snmpTrapOID:= (1.3.6.1.4.1.2793.2.5.0.5)
i3IcTrapErrorEventLogSubsys:= SwitchoverService
i3IcTrapErrorEventLogMsgID:= 11515
i3IcTrapErrorEventLogMsg:= Switch initiated If additional information is available, it can be found at https://my.inin.com/Support/Pages/Event-Search.aspx?EventID=11515
experimental.1057.1:= X.X.X>X

snmpTrapEnterprise:= I3IC-MIB:i3IcTraps (1.3.6.1.4.1.2793.2.5)

This trap and alert is to notify when our VOIP phone system has failed over to the secondary server.

I have gone in the trap rulesand tried setting up the conditions to only alert on this but I keep getting any trap emailed out that meets this trap condition I3IC-MIB:i3IcTraps.0.5

I have tried adding another condition with an AND statement but I then get no email alerts when that is running.

Any help would be appreciated.

  • 714 Views
  • Re: Help with alert based on a snmp trap
    bshopp
    bshopp Jul 28, 2011 2:59 PM (in response to profzoom1)
    Currently Being Moderated

    What other items have you tried, have you tried something like trapvarbind = blah

    • Re: Help with alert based on a snmp trap
      profzoom1
      profzoom1 Jul 29, 2011 7:53 AM (in response to bshopp)
      Currently Being Moderated

      No I have not tried doing any other things for this trap.

      I did notice when doing a mib walk that this is coming up unsupported so I think maybe that is the problem allthough it does give me all the trap details of what is in the trap. Is there a way to alert off of the trap details? I have not been able to just  set a condition of contains 11515 and then alert from that condition.

      I was hoping that either someone on here or Solarwinds can help me out on this one, since for our phone guy this is a huge issue in monitoring our I3 CIC phone system with Solarwinds.

      • Re: Help with alert based on a snmp trap
        tbell52
        tbell52 Jul 29, 2011 8:28 AM (in response to profzoom1)
        Currently Being Moderated

        I'm not sure which version of NPM this came with but we're able to send an alert based off of trap details.  We're running NPM 10.1.2.  If you don't have it in your version then I would suggest upgrading since it would give you what you need.  You would be able to send an alert by looking for SwitchoverService in the trap details. 

        • Re: Help with alert based on a snmp trap
          profzoom1
          profzoom1 Jul 29, 2011 10:55 AM (in response to tbell52)
          Currently Being Moderated

          This now fixed, I guess some reading skillz are needed when using traps.

          Oliver form SW support helped point this out to me and that was great info had you use *i3IcTrapErrorEventLogMsgID:= 11515* in the trap details I had tried just *11515 and that did not work.

           

          thanks for all the hep

Actions

More Like This

  • Retrieving data ...