cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 9

Parsing Trap Text For Alerting

Jump to solution

I get the following trap and this is what ${Message} is in the email.

03/08/2011 08:20 : ARROWPOINT-SVCEXT-MIB:apSvcTransitionTrap SNMP Trap
Received Time:3/8/2011 8:20:32 AM
Source:192.168.49.174(192.168.49.174)
Community:marcnet
Variable Bindings
sysUpTime:= 2 days 13 hours 35 minutes 55.25 seconds (22175525)
snmpTrapOID:= ARROWPOINT-SVCEXT-MIB:apSvcTransitionTrap (1.3.6.1.4.1.9.9.368.1.15.1.0.1)
apSvcTrapEventText:= Service Transition - Service:test State:suspended

 

What I want is the "apSvcTrapEventText" line with just "Service:test State:suspended" in the email.  How do I format the email text to get it?

I tried ${apSvcTrapEventText}  but that came through as "apSvcTrapEventText" in the email.

0 Kudos
1 Solution
Level 9

Yea, The email text looks like this now:

${DateTime}

${Caption} - ${vbdata3}

Pretty simple really but their documentation is severely lacking on this subject.  Searching for "vbdata" in the help yeilds no results.  Atrocious really when you consider how much this package costs!

View solution in original post

0 Kudos
6 Replies
Level 10

I was able to create alerts from traps using the method provided in this post using advanced alert manager:  https://thwack.solarwinds.com/docs/DOC-187440​ .  However, I'd like to also include some varbind data in the alert itself, and in the event log message that is triggered by the alert.  Is it possible to use the varbind data in the trigger action message?

0 Kudos
Level 9

By the way, I'm running 10.1.1 SP1

0 Kudos
Level 15

you have to know which varbind it is.  Try ${vbData3}

Level 9

Yea, The email text looks like this now:

${DateTime}

${Caption} - ${vbdata3}

Pretty simple really but their documentation is severely lacking on this subject.  Searching for "vbdata" in the help yeilds no results.  Atrocious really when you consider how much this package costs!

View solution in original post

0 Kudos
Level 15

I went into the alert and clicked "help with macros" and found this page.

0 Kudos
Level 15

oh, and ${SQL:select replace(${vbData1},"Service Transition - ",""}

but I am not sure if "${SQL:" works with trap alerts.

0 Kudos