Is there a way to test for a value in a traps variable bindings as part of the condition for generating an SNMP Trap based alert? For example given this trap message
sysUpTime=26 days 1 hour 10 minutes 42.04 seconds
clogHistMsgText.191706=Duplicate address sourced IP on Vlan70, sourced by mac address
experimental.1057.1=switch IP address
can I build the condition based on trapOID = CISCO-SYSLOG-MIB:clogMessageGenerated and clogMsgName=DUPADDR
Yes, you'll need to find the varbind trap OID for the data you're trying to trigger on. In the future, we hope to make this easier. See this thread for what we're working on in this area: Orion Syslog/Trap - what we're working on...