Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Change Orion interface status based on link down Trap

Folks,

Many of you have requested the ability to configure an action in Trap Viewer for changing the status of an Orion NPM interface (advanced alerts, rollup, maps) based on a "link down" trap. The primary driver for this enhancement is the ability to more quickly and reliably detect flapping links.

To implement this, we need to determine the interface index from the trap to correlate to an interface in Orion.

We believe that the majority of devices that support MIB-2 Traps will always send the interface index as a variable in the "link down" trap.

Would you agree for the devices in your environment?

If not, what devices wouldn't this work with?

Thanks in advance for your feedback!

Find more posts tagged with

Accepted answers

All comments

brian_duvall

I agree that most should support the Mib-2 link down trap with the interface index. I can't think of devices we have that don't do this but I haven't taken an in depth look recently.

This would be neat to see how well this works...we too have been bitten when links flap quickly and we miss it via our 3min polling interval. At least with this we could see how many times it truly went down over time. I assume the link up trap would clear the alarm or would it wait on the default polling interval for clearing or both?

chris.lapoint

At least with this we could see how many times it truly went down over time. I assume the link up trap would clear the alarm or would it wait on the default polling interval for clearing or both?

Both. You could setup another action on a link up trap to clear the alarm or you could let the default poll change the status back

mbrison

How would you perform a notification outside of an event in the web interface. If an interface goes down and comes back up, your normal poll will then adjust the interface status to up. Unless somebody is monitoring the events you would not have any visual notification of this device being down (i.e. on the maps).

Outside of traps and syslog, which have limited access to interface details, has anybody come up with a way to notify somebody (i.e. email) when an interface goes down? It would be nice if advanced alerting was capable of this, but there seem sequential issues with that as well. The advanced alert would need to take place between the time the interface was marked as down and the normal polling cycle resets the interface to up.

While in the right direction, this solution seems less than adequate.

julrich

I think this is a great idea. I believe I even bought something like this up over a year ago

All of our devices send link down traps with the same interface index as what is being polled via snmp.

ctopaloglu

What is the current status of this request? Any update?

ctopaloglu

and please move this thread to the NPM Feature Request forum.

GZhytar

Folks,

this is possible to do via "Change Status of an Interface" Alert Action you can assign to Trap Rule in Trap Viewer GUI in NPM 10.1.2