Can the SNMP Trap Alerts grab information from Orion NPM custom variables assigned to the same host or are they two completely seperate tools that do not share information?
--Mark.
When a SNMP Trap comes in for system A, I want to trigger an alert that sends an e-mail out and include in that e-mail some custom variables that I have for system A in Orion NPM. For example, a cold start might be received and I might in turn send an e-mail that has the contact information for System A which is grabbed from NPM.
--Mark
There seems to be some confusion on this issue. Only advanced alerts allow you to access the custom properties and build variables dynamically. Basic alerts, syslog, and traps each have their own finite set of variables that are supported.
To answer the original question, you can not access the custom property values from the variables in Trap service.
Sorry. My bad. I asked a question of Development without sufficient context and then posted the answer. Our long-term plan is to consolidate the alert engine in Syslog and Traps into the advanced alert engine, but I don't have a definite time frame on that yet.
Ah, that would explain it. I definitely would like this added to the feature request list. I'm also interested in using advanced alerting capabilities with SNMP traps. For example, let alerts be based on OIDs AND custom variables.
--Mark.
I know the answer os probably no but I'll try anyway.
Is there any way to filter out the info from the trap message that you do not want and only get the necessary info? In my case with the trap alert there is too much info. A big issue is the community string is being sent,
Would there be a workaround using advanced alerts?
Hello,
I wanted to see if there has been any update to this? We are using Orion to replace some software that we have used and we do most of our alerting from trap's we've recieved. Not being able to pull out the needed information and format the messages in a simlar matter isn't a good position for us to be in. Is there anyway to use the advanced alerts with traps? We are curring running NPM 9.0 SP2.
Thank you...
The Advanced and Basic Alerts will not trigger off of traps. This is by design. In the Trap Viewer you can create Rules (View > Alert/Filter Rules) where the Trap Service will send out alerts based off of traps. This will not show up as an active alert, but it can still send out emails, discard the trap, log to a file, forward, execute external scripts, etc. It's a built-in Alert functionality run by the Trap Service separate from the Alerting Services.
Thank you for the response. According to the previous posts, we can't pull out items from the trap messages. If we look at mstensta's quoted information below, he's trying to do the same thing that I would like to do. With the phrase "Variable Bindings" in the message, it is very misleading as to what you can do. Before I found this post, I had set up some some alerts like we have configured in our other system trying to use something like ${bCurrentStr.1} from below believing that it would be able to put 16.4A in the message. Is something like this in the road map? We do about 75% of our alerting this way and having to see the full message as it is listed below isn't very friendly to the way we function.
You should be able to use: ${type.<fieldName>}
Example: ${Node.MyCustomProperty}I must be doing something wrong, as this isn't working for me. Here is what I'm using:
${DateTime} : ${MESSAGETYPE} ${MESSAGE}
Owner: ${Node.SystemManager}When I receive the e-mail I'm getting:11/27/2007 10:08 AM : CYBERSWITCHING-MIB:cyberswitching.0.13 SNMP Trap
Received Time:11/27/2007 10:08:40 AM
Source:XXX.XXX.XXX.XXX(XXXX)
Community:XXX
Variable Bindings
sysUpTime:= 131 days 11 hours 15 minutes 25.64 seconds (1135892564)
snmpTrapOID:= CYBERSWITCHING-MIB:cyberswitching.0.13 (1.3.6.1.4.1.14300.0.13)
triBankTrapped:= 1
bCurrentStr.1:= 16.4A
bCurrentInt.1:= 16
experimental.1057.1:= XXX.XXX.XXX.XXX
snmpTrapEnterprise:= CYBERSWITCHING-MIB:cyberswitching (1.3.6.1.4.1.14300)
Owner: ${Node.SystemManager}
As you can see, it's not listing out the custom variable.--Mark.
Is something like this in the road map?
I am having the same issue with the inability to pull out info from traps. Sure I can log the entire trap including a ton of worthless info, but the ability to define variables and pull data out of a trap is the key to most who are use to trap receivers that have this ability. We currently use NNM and this serious limitation in the Orion trap receiver is causing me to find alternate means of performing trap receiving functions that I would prefer to handle in Orion.
Is something like this in the road map?
I cannot answer to that- Denny would know more and can clarify when he returns, but I would assume so. Have you seen the SNMP trap alert within ipMonitor that uses varibale bindings? I'm not sure what products you own.
We just purchased what's in my sig and we installed another NPM with NetFlow in another facility.
Is something like this in the road map?
I cannot answer to that- Denny would know more and can clarify when he returns, but I would assume so. Have you seen the SNMP trap alert within ipMonitor that uses varibale bindings? I'm not sure what products you own.
We just purchased what's in my sig and we installed another NPM with NetFlow in another facility.
I would also like to express my interest in getting advanced alerting capability in syslog and trap viewer; plus the ability to parse information from traps. I also am currently having to use an open source trap receiver that has loads more functionality than trap viewer, when this should be included into for-profit software. This seems like a highly repeated subject of interest on Thwack, I would have assumed it made it's way into 9.0.
This is a feature that's planned for a future release.
Hi Denny,
I was wondering if you had any more information on this. Our HP maintenance is coming due in a few months and we haven't switched our alerting to Orion yet because of how bad most of the alerts look. We really don't want to have to renew anything and I'd really like to get the alerting moved over.
Thanks!
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.