With the new(ish) trap alert variables I'm able to pull out a specific IP address. For example, I get a "PeerLost" trap relating to IPSEC tunnels and I want to alert on abnormal terminations. The trap includes a number of lines but I figured out using the variable ${vbData4} allows me to pull the remote peer IP address out of the trap.
What I can't figure out now is if there's a way to associate that IP address with a Node Name in the system. If I use a NodeName variable I get the name of the host that sent the trap. That's not what I want. I specifically want the peer that's listed in the trap.
I'm guessing I'll need to script this but I was really hoping there's a way to do it through the trap alert manager.
If I do need to script it can someone point me towards the necessary table I need to query to match IP address against node name?