Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

TRAP alert "TRAP DETAILS"

sja

How do make trap alert and clear trap alert

when I have only that text as different in trap details?

Alert

prismaIItrap.20.1.15 = InPwr exceeded major threshold

Clear

prismaIItrap.20.1.15 = InPwr within major threshold

Clear

rismaIItrap.20.1.1 = 24

prismaIItrap.20.1.2 = 1

prismaIItrap.20.1.3 = 2

p2almLabel.24.5.12 = InPwr

p2almIndex.24.5 = 12

prismaIItrap.20.1.6 = Module=1550nm Optical Amplifier, Model=3015

p2chassisID.24.5 = 24

p2slotID.24.5 = 5

p2moduleCLLIcode.24.5 = N/A

p2moduleCLEIcode.24.5 = N/A

prismaIItrap.20.1.11 = B98LFww5BwQ=

prismaIItrap.20.1.12 = Mon, 23 Nov 2015 12:57:07 CET

prismaIItrap.20.1.13 = 7.59459

prismaIItrap.20.1.14 = dBm

prismaIItrap.20.1.15 = InPwr within major threshold

snmpTrapOID = PRISMAII-ICIMR013-MIB:p2trapEvents.0.9

sysUpTime = 0,00 second

experimental.1057.1.0 = 172.16.96.208

snmpTrapEnterprise = PRISMAII-ICIMR013-MIB:prismaIItrap

Alert

prismaIItrap.20.1.1 = 23

prismaIItrap.20.1.2 = 1

prismaIItrap.20.1.3 = 1

p2almLabel.24.5.12 = InPwr

p2almIndex.24.5 = 12

prismaIItrap.20.1.6 = Module=1550nm Optical Amplifier, Model=3015

p2chassisID.24.5 = 24

p2slotID.24.5 = 5

p2moduleCLLIcode.24.5 = N/A

p2moduleCLEIcode.24.5 = N/A

prismaIItrap.20.1.11 = B98LFww3KU8=

prismaIItrap.20.1.12 = Mon, 23 Nov 2015 12:55:41 CET

prismaIItrap.20.1.13 = 7.60402

prismaIItrap.20.1.14 = dBm

prismaIItrap.20.1.15 = InPwr exceeded major threshold

snmpTrapOID = PRISMAII-ICIMR013-MIB:p2trapEvents.0.9

sysUpTime = 0,00 second

experimental.1057.1.0 = 172.16.96.208

snmpTrapEnterprise = PRISMAII-ICIMR013-MIB:prismaIItrap

Find more posts tagged with

Accepted answers

All comments

RichardLetts

You have to use some custom SQL, unfortunately it's really hard for me to give an example of without actual data

a) I use color codes on traps in the trap manager to identify the set and clear trap types

b) then I check the color coding of the trap to match the set and reset conditions...

[I don't have prism optical equipment, only Cisco, Adva, and Infinera...]

The Adva's SNMP support is pretty darned awesome.

sja

is there way to mach txt like " InPwr exceeded major threshold" ???

without custom SQL ?I know that way you get Advance alert that you can control with CP...

But any how

Good to know that Adva has good snmp support we should get some fps3000 very soon.

njoylif

I've created content share where I tie traps in with NPM Node to alert from main alerting engine and not use trap engine....where you could use custom sql in reset conditions to reset that alert.

your sql query would tie in the trapvarbinds table and look for the reset phrase needed. PM me if you are interested and I'll see if I can help.

njoylif

hunh...looks like I'm late to the game on this one...see RichardLetts‌ post HERE

he goes into excellent detail/depth

sja

‌I sure like solarwinds help to make that "more dummy proof"....

I can wait 2-5 minutes to get one Trap alert that respect my CP for alert flow...

I will love to set a node in "service mode" and not getting traps

njoylif

if you look at the two traps that use my custom properties, "muteNode" is what I use to silence alerts while still "monitoring" the node/apps. I'm with you and I do believe that is a feature request that they are working on already though.

sja

Hi njoylif

Du you have any trap alert on interfaces with CP?

I have some interfaces with CP Interface_alert_type='24-7' on nodes that have node_alert_type='24/7'

I like to alert on interfaces flaps only on interfaces only with that CP's (node 24/7 +interface 24/7) combi...

Node ='24-7' AND Interface='24/7' and TRAP Tag like 'INTERFACE_24_7_FLAPING'

my SQL is not happy with what i came with...

njoylif

hmmmmm....you will probably have trouble with that b/c there is no key to reference the interface in the trap with the interfaces table....

try and test thoroughly....

alert trigger condition:

-Nodes-

--<join Interfaces i WITH(NOLOCK) ON (.... AND nodes.node_alert_type='24/7' AND >

<join trapvarbind vb WITH(NOLOCK) ON (....)

WHERE

vb.message like <something to identify trap as interface flapping trap>

-- this is potentially killer part

-- and vb.message like (select <*something from interfaces table - maybe description - that can be matched WHOLLY to part of the trap message*> FROM Interfaces i where ${NodeID}=i.nodeid and i.Interface_alert_type='24-7') )

and vb.message like (select InterfaceName FROM Interfaces i where ${NodeID}=i.nodeid and i.Interface_alert_type='24-7') )

WHOLLY - by this I mean for example:

node abc

interfaceName xyz

trap message from abc has: "interface xyz, changed state to down"

sja

ohhh

well ...it's more complex than I thought...

I will try first just with interface CP='24/7' without the node "join".

njoylif

Please post back results. thx