This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

SNMP Trap Alerting questions

sbeauchamp over 10 years ago

I have an external server that is sending SNMP traps to my NPM server. These traps have a certain variable in them that indicate a circuit ID. The problem is that this server sends the same snmp trap (until the problem is corrected) every 5 minutes, and unfortunately its not something I am able to change. What I need to be able to do create alerts based on the unique string in the variable I am looking for AND suppress the alerts so we only get the same unique alert once every 4 hours. Can I do this with NPM? I see that I can suppress the the alerts by the total number of alerts that come in on the rule, but I need to suppress them by the number of unique alerts.

Top Replies

Parents

0 ryoung over 10 years ago

sbeauchamp there are a few threads containing similar thought, concerns, and ideas:
Re: CONVERT SNMP TRAP TO Solarwinds ALERT?
Re: Getting SNMP Traps into Alert Central
If this doesn't shed any light - I will be here awaiting your response.
Cheers
Cancel
Vote Up 0 Vote Down

Cancel
0 sbeauchamp over 10 years ago in reply to ryoung

Those two seem to be at least partially what I am going for. I actually write my alerts from solarwinds to a windows event log where another program picks them up. The first post you linked asking to have an active alert via snmp traps is the closest i think. I may end up needing a third party tool to do what I want. Something like "alert is active if trap message containing text ABC is received" "Alert goes inactive if alert containing text ABC hasn't been received within 5 minutes of the previous one". If that makes any sense....
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sbeauchamp over 10 years ago in reply to ryoung

Those two seem to be at least partially what I am going for. I actually write my alerts from solarwinds to a windows event log where another program picks them up. The first post you linked asking to have an active alert via snmp traps is the closest i think. I may end up needing a third party tool to do what I want. Something like "alert is active if trap message containing text ABC is received" "Alert goes inactive if alert containing text ABC hasn't been received within 5 minutes of the previous one". If that makes any sense....
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ryoung over 10 years ago in reply to sbeauchamp

I reached the limit of my knowledge for this subject however, I have a let a product manager know to take a look in to your issue. I will be monitoring this thread to make sure you get a response. Good luck and have a great day.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jfrazier over 10 years ago in reply to sbeauchamp

sounds like you are talking about event correlation...not something the product does out of the box.
Cancel
Vote Up 0 Vote Down

Cancel
0 rob.hock over 10 years ago in reply to sbeauchamp

We're putting some thought into how we might tackle this problem in the future. Would you perhaps be interested in spending 30 minutes with some of our UX folks to review some things?
Cancel
Vote Up 0 Vote Down

Cancel
0 sbeauchamp over 10 years ago in reply to rob.hock

Sure, I could likely find some time for that. How would I get in contact?
Cancel
Vote Up 0 Vote Down

Cancel
0 rob.hock over 10 years ago in reply to sbeauchamp

Will ping offline in just a moment.
Cancel
Vote Up 0 Vote Down

Cancel