SNMPv2-MIB:coldStart alert rule strangeness.

Question

Hello, I've inherited a Solarwinds Orion deployment and am currently troubleshooting the following issue. There is an alert rule to send an email when our Orion server receives a SNMPv2-MIB:coldStart trap. For the most part, the rule works as intended and we get an email that looks like this: Server Name: esclx015 Server Description: Server Status: Up Node Owner: XXXXXXX Node Contact: ALERT RULE: : SNMPv2-MIB:coldStart -------- This alert was generated by an SNMP trap received from esclx015 after it has rebooted. The SNMP trap mechanism helps ensure fast reboots are caught and reported. However, Linux machines with an agent installed alert like this: Server Name: esclx061 Server Description: ${Comments} Server Status: Up Node Owner: ${Owner} Node Contact: ${ContactName} ALERT RULE: : SNMPv2-MIB:coldStart -------- This alert was generated by an SNMP trap received from esclx061 after it has rebooted. The SNMP trap mechanism helps ensure fast reboots are caught and reported. Has anyone seen this before or can anyone shed some light on where to look? Thank you, Tim

tjtoohey · Answer

Sorry for the huge delay, Tony.  Finally circling back to this.  Yes, I believe the polling IP and IP of the trap received are the same.  It just seems that the agent managed devices don't properly read the variables listed in the trap rule, while the other servers do.

Tim

tony.johnson · Answer

Thanks Tim,

For agent-based nodes does the polling I.P match the I.P of the trap received?

tjtoohey · Answer

Tony,

Good call.  I have been to trap viewer, but didn't think of looking there for any alert configurations.  This is what's configured for SNMPv2-MIB:coldStart

My apologies for all the screenshots, but I wanted to show the entire configuration. There wasn't anything significant under Time of Day and Trigger Threshold.  Everything seems to look right, but for our Linux servers with agents, the values are not properly portrayed.  Servers without an agent display the correct values.  Do agents not cooperate with Macros?  Is that our issue?

Thank you.