We have a new SNMP integration of Nagios going in but we are in a situation where we are not receiving all the alarms that we expect. Unfortunately I don’t have admin but I’m guessing that some rules are set up somewhere which govern what is forwarded and what is not.
Can anyone help / advise on this?
trap forwarding
Re: trap forwarding
1. How are you processing the traps on the nagios side? snmptt?
2. Are some traps alerting for a certain device while others do not alert for the same device?
3. Have you installed the mibs for the remote device?
4. How are you matching rules for traps? snmptt.conf?
2. Are some traps alerting for a certain device while others do not alert for the same device?
3. Have you installed the mibs for the remote device?
4. How are you matching rules for traps? snmptt.conf?
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
-
lanesilas17
- Posts: 3
- Joined: Mon Dec 01, 2014 12:16 pm
Re: trap forwarding
1. How are you processing the traps on the nagios side? snmptt?
We are processing with a netcool trap probe
2. Are some traps alerting for a certain device while others do not alert for the same device?
We are getting traps from some devices and not others. The only pattern I can see is that we only seem to see alarms where there is a notification in Nagios, so I'm guessing that it's related somehow.
So - I think the pattern is -
Alarm is in Service Status summary, but not in notifications - we don't get the SNMP trap
Alarm is in the Service Status summary - but in notifications - we do get the SNMP trap
3. Have you installed the mibs for the remote device?
Yes
4. How are you matching rules for traps? snmptt.conf?
Netcool rules. I've also run a raw trap capture so I'm certain it's not been dropped by the management system.
We are processing with a netcool trap probe
2. Are some traps alerting for a certain device while others do not alert for the same device?
We are getting traps from some devices and not others. The only pattern I can see is that we only seem to see alarms where there is a notification in Nagios, so I'm guessing that it's related somehow.
So - I think the pattern is -
Alarm is in Service Status summary, but not in notifications - we don't get the SNMP trap
Alarm is in the Service Status summary - but in notifications - we do get the SNMP trap
3. Have you installed the mibs for the remote device?
Yes
4. How are you matching rules for traps? snmptt.conf?
Netcool rules. I've also run a raw trap capture so I'm certain it's not been dropped by the management system.
Re: trap forwarding
1. Check the log:
If your traps are ending up here, than the mib has not been processed correctly.
2. Check XI --> Admin --> Unconfigured objects. If the traps are listed here, then they cannot be matched to a current object.
3. Next, check to see if the trap appears in the trap service. If it does, but is not changing status, then check the rule in snmptt.conf as the severity of the trap may not be set correctly:
Code: Select all
/var/log/snmptt/snmpttunknown.log2. Check XI --> Admin --> Unconfigured objects. If the traps are listed here, then they cannot be matched to a current object.
3. Next, check to see if the trap appears in the trap service. If it does, but is not changing status, then check the rule in snmptt.conf as the severity of the trap may not be set correctly:
Code: Select all
/etc/snmp/snmptt.confFormer Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
-
lanesilas17
- Posts: 3
- Joined: Mon Dec 01, 2014 12:16 pm
Re: trap forwarding
Thanks for your help. I will pass this on to the system administrator and let you know how we get on 
-
sreinhardt
- -fno-stack-protector
- Posts: 4366
- Joined: Mon Nov 19, 2012 12:10 pm
Re: trap forwarding
Sounds good thanks!
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.