Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Orion NPM SNMP traps alerts

Hi, new to this forum. Can somebody tell me what condition(s) I should add to my Trap Rule(s) so I can get alerted and email on any Sev. 0 - 3 on my Cisco devices?

Find more posts tagged with

Alert

trap_rules

email_alert

Accepted answers

All comments

Yann

Hi,

Could you post examples of SNMP Traps you received in Orion from these Cisco devices?

SNMP Traps do not have any severity defined like you would have in Syslog messages. However, it could be defined in the Trap details field.

Thanks in advance for sharing one or more examples.

Yann

Siskoboy

Yann,

Thanks for replying back. So currently I'm sending all my syslog (0-6) as SNMP traps with this command:

snmp-server enable traps syslog

and as a result I get traps like these:

16/2009 8:27:54 AM

172.21.255.16

ISI-101-11-SW01.corp.intusurg.com

1234567

CISCO-SYSLOG-MIB:clogMessageGenerated

snmpTrapEnterprise = CISCO-SYSLOG-MIB:ciscoSyslogMIBNotificationPrefix
experimental.1057.1 = 172.21.255.16
clogHistTimestamp.33614 = 340488883
clogHistMsgText.33614 = duplex mismatch discovered on FastEthernet2/48 (not full duplex), with SEP001FCAE8B9B1 Port 1 (full duplex).
clogHistMsgName.33614 = DUPLEX_MISMATCH
clogHistSeverity.33614 = 5
clogHistFacility.33614 = CDP
snmpTrapOID = CISCO-SYSLOG-MIB:clogMessageGenerated
sysUpTime = 39 days 9 hours 48 minutes 8.84 seconds

So how do I make a custom alert that notify me by email if I a Severity level less that or equal to 3: "clogHistSeverity.33614 = 5"

as well as if a fan or power supply dies?

Yann

"clogHistSeverity.33614 = 5"

Is the 33614 number a variable or does it remain the same all the time?

Siskoboy

33614 is a variable

aLTeReGo

Why not just use Orion's syslog server? It's definitely a whole lot easier to setup for what you're trying to do.

Siskoboy

How do I do that? Please give me an example how to make an alert to get email or pages on Sev 0 - 3 issues from my switches.

aLTeReGo

Well the 1st step is to configure the Cisco switches to send syslog by entering the "logging" command in config mode of your Cisco devices followed by the IP address of your Orion server. I.E.

switch(config)#logging 127.0.0.1