Parse Text out of Trap Variable for Alert Email

Question

I'm trying to parse text out of the ${MESSAGE} string and pass it along in the email.

With the default setup this is what I get in the message body (${DateTime} : ${MESSAGETYPE}  ${MESSAGE}):

---------------------------------------------

10/24/2010 10:44 PM : SL10-MIB:omnitronix.5.0.110  SNMP  Trap
     Received Time:10/24/2010 10:44:45 PM
      Source:192.168.50.20(192.168.50.20)
     Community:public
     Variable  Bindings
          sysUpTime:= 35 days 15 hours 39 minutes 4.39 seconds  (308034439)
          snmpTrapOID:= SL10-MIB:omnitronix.5.0.110  (1.3.6.1.4.1.3052.5.0.110)
          omnitronix.5.3.1.0:= Omnitronix  SL81
          omnitronix.5.3.3.0:= 03/24 05:25 :: Omnitronix SL81 :: CCU64  (1802194C) :: WANE Demods :: INACTIVE
          experimental.1057.1:=  192.168.50.20
          snmpTrapEnterprise:= SL10-MIB:omnitronix.5  (1.3.6.1.4.1.3052.5)

---------------------------------------------

But what I'd like to get is just the main body of the alert, which is "WANE Demods :: INACTIVE"

If I could use VB String operators or something similar on the variable I think I could do that, but I can't find any reference to this being possible. I recently migrated from What's Up Gold, and I had this working there, but I'm trying to wrap my brain around the Orion methodology.

Thanks,

Gerry

ginks · Answer

Thanks Luttrel - I ended up going back to What's Up Gold. Not just because of this issue, mainly because getting back to What's Up was less than the annual support fee for SolarWinds which I was going to have to pony up to get the new release. The annual fee for What's Up is $795. SolarWinds renewal (granted my contract had lapsed so this was to get back on support again) was $6,000.

My view after using both systems is that SolarWinds is very likely superior in flexibility and power, but there were just so many things that seemed convoluted in learning how to set up SolarWinds that just seemed very intuitive with What's Up. Maps are integral to the device setup in WUG, so while you're adding devices you're also creating the map.  Grouping devices for mapping is as simple as dragging and dropping the icons to a folder. You don't have to go to a separate Mapping program (and evidently I had an older version of the mapping app, I couldn't even sort the device list which was a royal pain for building map pages). Alerts, both monitor and trap, are integral to the device setup, you don't have to go to a separate Alarms app or whatever that was to set up alerts for ping failures or whatever, and yet another app for setting up Trap alerts. Default alert rules are assigned to devices as added, and you can bulk change those, but you don't have to go back to a separate app, try to find the device that's not yet set up for the alert, and tick that box.

Like I said, I'm not putting down SolarWinds, just saying that for my application I get a lot more bang for the buck from What's Up Gold.

Regards,

Gerry

luttrell · Answer

Parsing Trap variables for use in email alerts is now possible with NPM version 10.1

see release notes herehttp://www.solarwinds.com/support/Orion/docs/ReleaseNotes/releaseNotes.htm Syslog and TrapsThe following Syslog and Traps features have been included in this version of Orion NPM:·        Using the standard Orion ${vbName1} and ${vbData1}variable format,, trap variable binding names and value pairs are now available as alerting and message variables.Other Trap VariablesTrap VariableDescription${Application}SolarWinds application information${Community}Node community string${Copyright}Copyright information${DNS}Fully qualified node name${Hostname}Host name of the device triggering the trap${IP}IP address of device triggering alert${IP_Address}IP address of device triggering alert${Message}Message sent with triggered trap and displayed in Trap Details field of Trap Viewer${MessageType}Name or type of trap triggered${Raw}Raw numerical values for properties sent in the corresponding incoming trap.${RawValue}Raw numerical values for properties sent in the corresponding incoming trap. The same as ${Raw}.${vbData1}Trap variable value pair${vbName1}Trap variable binding name

ginks · Answer

That's definitely a step in the right direction, I'm on V9, but I guess the question is how could you parse out just the portion in question - in other words is there a way to do some kind of string-based operations on the text, like maybe a Visual Basic interpreter or something, so that you could customize the email?