Interface error Alert based on MIB Traps (RMON)

I have configured my Cisco 3750 and 6500 with RMON so it fires a snmp-trap when an interface recieves more than 0 interface-errors over a 1 min period towards my Orion 9.2 SP2.

These are the rmon commands used on my Cisco equipment:

rmon event 1 log trap SNMP-String description "High ifInErrors" owner ME

rmon alarm 1 1.3.6.1.2.1.2.2.1.14.283 60 delta rising-threshold 1 1 falling-threshold 0 owner ME

It looks like this when recieved in the Orion Trap Viewer:

sysUpTime=2816057649
snmpTrapOID=RMON-MIB:risingAlarm
alarmIndex.1=1
alarmVariable.1=IF-MIB:ifInErrors.283
alarmSampleType.1=deltaValue(2)
alarmValue.1=4
alarmRisingThreshold.1=1
experimental.1057.1=10.x.x.x
snmpTrapEnterprise=RFC1271-MIB:rmon

I want to be able to alert on this, i have the follwing questions:

How do I create an alert based on the trap ? Does anyone have a kind of template for this ?

Is it possible when configuring the alert to change the IF-MIB name to the real interfacename, eg:
IF-MIB:ifInErrors.283 = GigaEthernet 5/4 ?

If there's a another easier way to monitor and alert on interface-errors with RMON, please let me know.

Thanks

/Styrfus

Find more posts tagged with

advanced_alerts

Alert

SNMP

alarm

orion_snmp_trap

cisco

interface

Alerts

trap

Accepted answers

All comments

mark747

Set up a condition similiar to this:

SNMPv2MIB:snmpTrapOID is equal to RMON-MIB:risingAlarm

styrfus

Hi Mark

Thanks for your reply, I figured it out myself.. - its possible to right click the trap event in the trap viewer and "add rule" .. -it then inserts the needed info to make an alert on the chosen trap.

But thanks anyway.