Converting incoming traps into alerts/emails via Log Viewer?

Sorry if this is a very newbie question, but I'm having trouble finding a way to convert traps into alerts and email notifications on Log Viewer (we do not have Log Analyzer enabled). So far, the process of creating a trap rule doesn't seem give me that option. I did see a similar thwack post here, but since the cmdlet used in the powershell method provided is no longer guaranteed to be secure I wanted to see if there were other solutions to this. 

Thank you in advance, 

SNES3150

Parents
  • Enable the Alert integration, let it create a new alert and finish creating the rule.

    Once you're redirected to the list of rules, click on the Trigger Orion Alert text in your new rule item, a popover with a link to the alert will open, click on the alert's name and it will take you to the alert configuration.

    There you can add any usual rule actions including sending an email. Just use approprate macro to send what you need. ${N=OLM.AlertingMacros;M=OLMAlertMessage.EventMessage} is used for the event message (content of a trap, syslog, etc.).

  • Thank you for such a swift response! I'm looking into the Alert integration settings right now. Just to clarify, does enabling alert integration involve configuring instances of ServiceNow or Service Desk? 

Reply Children
  • I think you have to add such action in trigger actions:


  • Sorry, I think I misunderstood what you meant. I'm assuming the alert integration is done with the two check boxes here.   I'm not able to create rules at the moment, so I'll have probably have to resolve this first. 

    Thank you for the help once again. I will update here once I'm able to create a rule. 

  • The first checkbox means that OLV will send a message to alerting to trigger an alert. You have to have this selcted.

    The second checkbox just adds an alert for you if you don't have one already. Make sure that the alert (its name) you're trying to create doesn't already exist.

    But I don't know what those errors mean. Maybe - do you use an Orion account which has permission to manage alerts?

  • Thank you for a very detailed response, your posts have been tremendously helpful. I'll make sure the same name error doesn't exist in the alert manager. As for the other issue, it probably is the permission. I do have the permission to manage alerts, and I can duplicate existing rules, but I can't seem to establish new ones.