Trap Alert/Filter Variables question

I use the trap message feature in the NPM a lot. I use it to watch for alarms from a lot of devices in our Data Centers. Any plans to expand and make trap messages better would be very nice.

Any plans to expand and make trap messages better would be very nice.

Can you elaborate on what you'd like to see?

Hey John,

In your email example with the line "The Backup Server Service has stopped." What would the variable be? ${vbData?} or exactly what?

Thanks.

Assuming the numbering starts at 1, the variables would look like this:

${vbValue3} ${vbValue6}  

To produce this:

Backup Exec: Application Terminating. The Backup Exec Server Service has stopped.

Upgrade to the 10 RC, which should be in your customer portal to check out this new feature.

here's the string from my ${vbData3}

(some of my data is altered for security reasons)

28Apr2010 14:47:47 drop MYSERVERNAME >Internal snmptrap rule: 199; rule_uid: {FCDE4523-D623-5182-C8E5-79CEBEE83B70}; rule_name: trap internal non SMTP senders; SmartDefense profile: Default_Protection; service_id: smtp; src: 172.16.50.50; dst: 200.1.1.21; proto: tcp; product: THIS & THAT-1; service: smtp; s_port: 61875;

for instance, am i supposed to be able to use something like ${vbValue22} to pick up the position SRC IP address for this? If so, when I use vbValue I get nothing.

i've tried ${vbValueX} in other ways, but it is always empty. thanks (BTW - this is NPM 10 RC2)

" := " is the delimiter between trap binding names and their respective data.  Does NPM 10 have the ability to pull individual parts of the trap binding data with another set of variables using " ; " as the delimiter?

Not all manufacturers are going to use " ; " as a delimiter, but it would be pretty slick if NPM could do that.

John

The functionality described by outsidesys would be excellent to have. I want to be able to pass specific variable binding values in an email or log file.

Look forward to seeing the results of this stream.

I would also like to see that feature.

Maybe a input field where you could write what char's you want as delimiter.

-Steffen

This looks like exactly what I need.  Did this make it into the current release and if so, are there some notes about how to use it?

Sorry to drag this old thread up, but we really need a guide on how to do this as well.  I haven't been able to find any info in the documentation, so if someone could point me the right direction that'd be great.  Right now our alert emails/pages generated from traps (mostly forwarded event logs) are full of unnecessary info and need to be scaled back to something easily comprehended by a human at 2am :)

Here is what I was able to find on which variables to use for traps in the email alerts, this was from the release notes when the feature was added...

Using the standard Orion ${vbName1} and ${vbData1}variable format,, trap variable binding names and value pairs are now available as alerting and message variables.

Here is what I was able to find on which variables to use for traps in the email alerts, this was from the release notes when the feature was added...

Using the standard Orion ${vbName1} and ${vbData1}variable format,, trap variable binding names and value pairs are now available as alerting and message variables.