Hello,
I am trying to setup a custom alert on a specific trap. I currently have an alert setup through Log Analyzer for all traps coming from a specific device. I still want to alert on all other traps from this device.
The condition I want is, if the specific trap happens "X amount of times" in "X amount of minutes"
We have a trap that can trigger multiple times in short window, but I only want one alert/email sent out for that entire window. So it might fire the trap 5 to 10 times in a row, but I only want one alert/email triggered. Key word of trap being "Block". Block is followed by different strings of numbers and the word "substituted", but those numbers aren't important and can vary.
If that's not possible, ignoring traps with the word "Block" is my second option.
Actual Trap:
snmpTrapOID:= 1.3.6.1.4.1.17869.2.1.1.0.1 sysUpTime:= 627427769 description:= SimulcastSlave(Glenada-WLEMS): Block 110911 substituted severity:= 2 sourceIdentifier:= 1.3.6.1.4.1.17869.2.1.3.10
Thank you.
