4 Replies Latest reply on Mar 15, 2018 12:29 PM by kpmarcin

    CONVERT TRAP TO ALERT, can this be done?

    bootneck1111

      I would like to know if we can convert or push SNMP Traps through into an Alert?

        • Re: CONVERT TRAP TO ALERT, can this be done?
          kpmarcin

          Hello,

           

          Everything is possible Officially SolarWinds has dedicated Alerts for Traps in "Trap Viewer" and those cannot be the same as Alerts in Web console.

          I am assuming that this is what you want to achieve - to trigger Alert in web console from Trap.

           

          There are two ways to do that.

           

          First option will need SAM module license

          -----------------------------------------------------

           

          1. Define custom Alert for filtered Traps (depending on the use case) in Trap Viewer

          2. Add Windows Event Log in Alert Action

          3. Define content of the Alert - Hint: include random ID, which will be used later on.

          4. Define "Log Message in Event Log on NetperfMon Server" - this will be for monitoring those events internally for SolarWinds

          5. In SolarWinds web console, add SolarWinds server as WMI.

          6. Create new SAM template to monitor Windows Events and filter them to ID from step 3

          7. Once the events will be received by server, you will notice that you can view all the content of the event from web console

           

          You can also assign web Alerts for those events.

          Would this be applicable for you?

           

           

          Second option requires knowledge of scripting

          -----------------------------------------------------

           

          1. Download and install Orion SDK

          2. Define custom Alert for filtered Traps (depending on the use case) in Trap Viewer

          3. Define "Execute an external program" in Alert Actions

          4. Point external program to powershell executable with additional parameters, if required

          5. Use below documentation for creating custom script, which will initiate web console Alert:

          Alerts · solarwinds/OrionSDK Wiki · GitHub

           

          I hope the above will help you.

           

          Kind regards,

          Marcin Kazmierczak.

          ---

          IT-Indago Ltd. - Authorized Reseller & SolarWinds Certified SCP Professional

          IT-Indago – Be In Control!  |  Follow us on Facebook & LinkedIn

          3 of 3 people found this helpful
            • Re: CONVERT TRAP TO ALERT, can this be done?
              user_56789

              Hi Marcin,

               

              I got so far in the trap viewer that it logs the trap into the event log.

              How do you include a random ID?

              The help button did not really take me anywhere useful.

               

               

              Regards,

              Sebastian

                • Re: CONVERT TRAP TO ALERT, can this be done?
                  kpmarcin

                  Hello,

                   

                  >> How do you include a random ID?

                   

                  As far as I know, you cannot define "Event ID" for the Alert action on Trap Viewer. However you can add a point of reference to the Alert message.

                   

                  Here is a simple example of action:

                  -----------------

                  -----------------

                   

                  Next, go to:

                   

                  1. Settings -> All Settings -> SAM Settings -> Component Monitor Wizard -> Custom Performance Monitor - WMI

                  2. Choose a test server (SolarWinds main server would be good)

                  3. On Performance Object choose any object (you can delete it afterwards)

                  4. On "Edit Properties" click "Add Component Monitors"

                  5. Find and add "Windows Event log Monitor"

                  6. Delete previously added performance component

                   

                  It should look something like that:

                  -----------------

                  -----------------

                   

                  7. Expand the Windows Event Log Monitor and configure the "match definition". I did something like that:

                   

                  -----------------

                  -----------------

                   

                  8. Save the template

                   

                   

                  Next, go to the template from SAM Summary view and you will be able to see the Events

                   

                  -----------------

                  -----------------

                   

                  You can click on the selected event log and check the details:

                   

                  -----------------

                  -----------------

                   

                  Once you have it up and running, you can define on the SAM template what status the Application component should have (from "Edit Application Monitor")

                  -----------------

                  -----------------

                   

                  You can also add new Alerts for this Application component.

                  Basically once you would send the trap to SolarWinds web console, you can do anything with it.

                   

                  Kind regards,

                  Marcin Kazmierczak.

                  ---

                  IT-Indago Ltd. - Authorized Reseller & SolarWinds Certified SCP Professional

                  IT-Indago – Be In Control!  |  Follow us on Facebook & LinkedIn

                  1 of 1 people found this helpful
              • Re: CONVERT TRAP TO ALERT, can this be done?
                cshanep

                Might be able to create a database trigger to create an alert record when a trap is created.