SNMP Trap alerting is stopped frequently from Log Analyser

We are receiving the SNMP Traps from devices to Log Analyser but alerting is not working after some time.

As we have High availability enabled, we are doing a failover and alerting is working for some hours again same issue is repeating?

Raised vendor case still no solution. Is anyone faced this type of issue earlier?

Find more posts tagged with

Alert

snmp trap

SNMP

log analyzer

trap

Accepted answers

All comments

bourlis

Rajahanumanth,

Sorry this is not a fix reply, but more of a inquiry reply. We've just started the design phase of implementing HA so I would like to glean as much info from you as I can.

Also hopefully by asking these questions, a fellow Thwacker will be able to resolve your issue.

Questions

What type of HA are you using local subnet or multi-subnet?
If local subnet what address are you sending your traps to? The VIP, the primary active poller or both the active & standby poller?
If multi-subnet where are you sending your traps to? The VName or to the active & standby polling engine?
If VName, what type of DNS are you using to ensure the DNS record gets updated correctly?
Is the HA setup on an additional polling engine or a primary polling engine?
What version of SolarWinds are you running?
Did this work at one point in time and then stopped working? Or has this always been an issue?
Are you saying alerting works for a short time after a fail-over but then stops after a period of time?
Lastly, when alerting stops are the SNMP traps viewable in the console?

rajahanumanth

Got the temporary solution now by blocking the traps for few devices which are sending lakhs of traps each hour.

What type of HA are you using local subnet or multi-subnet? local subnet
If local subnet what address are you sending your traps to? The VIP, the primary active poller or both the active & standby poller? both the VIP's
If multi-subnet where are you sending your traps to? The VName or to the active & standby polling engine?
If VName, what type of DNS are you using to ensure the DNS record gets updated correctly?
Is the HA setup on an additional polling engine or a primary polling engine? HA is there for all
What version of SolarWinds are you running? 2024.4.1
Did this work at one point in time and then stopped working? Or has this always been an issue? yes
Are you saying alerting works for a short time after a fail-over but then stops after a period of time? yes
Lastly, when alerting stops are the SNMP traps viewable in the console? yes

bourlis

Interesting! I'm experiencing a similar issue, minus the HA part. However, I'm in the process of moving our SW instance to HA.

I keep getting notifications that SW is receiving SYSLOG messages from nodes that are not monitored, even though it is. Messages are being sent from the management interface, but SW keeps dropping them.

I have a ticket open and I'm waiting to hear back from the DEV team.

I wish you luck on your issue and I wish I had a solution for you.