SNMP traps - filter the received messages

Antony · Post by **Antony** » Sat Sep 24, 2005 5:04 am

Hello,

i have setup some snmp traps from several network equipments. What i am getting is this:

2005-09-21 17:33:13 UTC,Syslog.Debug,10.1.1.1,"uptime=10360270, generic_num=6, specific_num=1, sysContact=, sysName=NODE1, sysLocation=CITY1, 1.3.6.1.4.1.2606.4.2.3.7.2.1.1.1=1, 1.3.6.1.4.1.2606.4.2.3.7.2.1.2.1=""Temperature Sensor"", 1.3.6.1.4.1.2606.4.2.3.7.2.1.3.1=6"

2005-09-21 17:35:02 UTC,Syslog.Debug,10.1.1.1,"uptime=10371090, generic_num=6, specific_num=1, sysContact=, sysName=NODE2, sysLocation=CITY2, 1.3.6.1.4.1.2606.4.2.3.7.2.1.1.1=1, 1.3.6.1.4.1.2606.4.2.3.7.2.1.2.1=""Temperature Sensor"", 1.3.6.1.4.1.2606.4.2.3.7.2.1.3.1=4"

As you may see, these are traps sent due to an alarm at the temperature of the monitored equipment. Is there a way for the program to send me an email that will be something like this:

Date - Sysname (whatever it is) - Temperature Sensor - Alarm
(6 means Alarm)
and
Date - Sysname (whatever it is) - Temperature Sensor - 6
(4 means OK)

I see that HostMonitor is only able to reply the OID, value and some other things that don't really tell me what is going on with the equipment i am monitoring

I am really looking forward to your response!!!

KS-Soft · Post by **KS-Soft** » Sat Sep 24, 2005 11:30 am

What i am getting is this:
...

You are gettings this as counter value?

Is there a way for the program to send me an email that will be something like this:
Date - Sysname (whatever it is) - Temperature Sensor - Alarm
(6 means Alarm)

Use %DateTime% variable to show date in the mail
Use %TrapHost% to show sysname
If your devices are sending traps with various messages (not only temperature alerts) and you want to sent different mails, you should setup separate test items for each type of alert and use different e-mail templates for each kind of alert.

Regards
Alex

Guest · Post by **Guest** » Sat Sep 24, 2005 2:45 pm

I am getting the whole message when i use another software, i could not get the whole message with hostmonitor. Or is there a way for hostmonitor to reply the whole message?

May i post another question here if i try your advice and still have a problem?

Thanks alot!!

Antony · Post by **Antony** » Sat Sep 24, 2005 2:47 pm

Anonymous wrote:I am getting the whole message when i use another software, i could not get the whole message with hostmonitor. Or is there a way for hostmonitor to reply the whole message?

May i post another question here if i try your advice and still have a problem?

Thanks alot!!

Sorry for not posting my name (Antony) in the previous message

Guest · Post by **Guest** » Mon Sep 26, 2005 12:45 am

KS-Soft wrote:
What i am getting is this:
...
You are gettings this as counter value?

Is there a way for the program to send me an email that will be something like this:
Date - Sysname (whatever it is) - Temperature Sensor - Alarm
(6 means Alarm)
Use %DateTime% variable to show date in the mail
Use %TrapHost% to show sysname
If your devices are sending traps with various messages (not only temperature alerts) and you want to sent different mails, you should setup separate test items for each type of alert and use different e-mail templates for each kind of alert.

Regards
Alex

I used %TrapHost% and i got the ip address of the equipment.

e.g.2005-09-21 17:35:02 UTC,Syslog.Debug,10.1.1.1,"uptime=10371090, generic_num=6, specific_num=1, sysContact=, sysName=NODE2, sysLocation=CITY2, 1.3.6.1.4.1.2606.4.2.3.7.2.1.1.1=1, 1.3.6.1.4.1.2606.4.2.3.7.2.1.2.1=""Temperature Sensor"", 1.3.6.1.4.1.2606.4.2.3.7.2.1.3.1=4"

What should i use to get NODE2 instead of the ip address?

KS-Soft · Post by **KS-Soft** » Mon Sep 26, 2005 2:03 pm

I am getting the whole message when i use another software, i could not get the whole message with hostmonitor. Or is there a way for hostmonitor to reply the whole message?

Sorry, I do not understand you. What is "whole message"?
"Display" property of the SNMP Trap test method allows you do specify what information should be displayed in "Reply" field:
- Agent address
- Trap type
- Enterprise
- OID
- Counter
- Relative value
- OID & value

Do you want to see all these properties at the same time?
HostMonitor does not show all of them in the Reply field. But you may send all these parameters in notification mail.

I used %TrapHost% and i got the ip address of the equipment.

Correct. This variable represents IP address of the host that have sent the message.

What should i use to get NODE2 instead of the ip address?

Node2? Do you mean hostname? H'm, HostMonitor does not translates address of the agent into hostname...

Regards
Alex

Antony · Post by **Antony** » Mon Sep 26, 2005 8:44 pm

The equipment that i am monitoring is sending me the following message

2005-09-21 17:35:02 UTC,Syslog.Debug,10.1.1.1,"uptime=10371090, generic_num=6, specific_num=1, sysContact=, sysName=NODE2, sysLocation=CITY2, 1.3.6.1.4.1.2606.4.2.3.7.2.1.1.1=1, 1.3.6.1.4.1.2606.4.2.3.7.2.1.2.1=""Temperature Sensor"", 1.3.6.1.4.1.2606.4.2.3.7.2.1.3.1=4"

Now, is it possible for hostmonitor to send an email that will contain the ip of the equipment and the words NODE2, CITY2 and Temperature Sensor which are contained in the snmp message?

KS-Soft · Post by **KS-Soft** » Tue Sep 27, 2005 6:34 pm

HostMonitor cannot parse custom response strings. If you need custom messages, you may setup separate SNMP Trap test items for each type of the message

Regards
Alex

Antony · Post by **Antony** » Sun Oct 23, 2005 12:06 pm

Um, is it possible to search in the snmp trap message for a keyword or phrase, without needing to specify the oid that contains the text string?

e.g. can i have hostmonitor look for the text "Temperature Sensor" without specifying any oid that contain it?

KS-Soft · Post by **KS-Soft** » Mon Oct 24, 2005 1:08 pm

Its impossible in currect version. I have added your request into "do to" list

Regards
Alex

Antony · Post by **Antony** » Mon Oct 24, 2005 1:39 pm

KS-Soft wrote:Its impossible in currect version. I have added your request into "do to" list

Regards
Alex

Thank you very very much, it''s very important to me

Best regards