SNMP Trap Notifications not delivered

[aap]

Hi,

We are running Nagios XI 2014R2.6 and are currently experiencing an issue - SNMP traps generated are not being delivered as notifications.

The trap messages appear in /var/log/snmptt/snmptt.log however no notifications are sent to contact groups for Critical, Warning or Informational messages. Also, these notifications are not displayed in the status information column for each host in Nagios.

snmpd (pid 30583) is running...
snmptt (pid 1417) is running...

I noticed that after a reboot the snmpd service did not start automatically, this was subsequently started.

Any assistance to resolve this issue is appreciated.

[ssax]

You would want to set snmptt/snmptrapd to start on boot:

Code: Select all

chkconfig snmptrapd on
chkconfig snmptt on

If you look in your /etc/snmp/snmptt.conf at one of the traps, what does the EXEC line say?

If you want you can zip up your /etc/snmp directory and PM it to me.

[Box293]

I noticed that after a reboot the snmpd service did not start automatically, this was subsequently started.

snmpd does not play a part in SNMP Traps.

[aap]

Thanks ssax,

PM sent.

[ssax]

Received the files and placed in the shared support directory.

Edit your /etc/snmp/snmptrapd.conf and change:

Code: Select all

traphandle default /usr/local/sbin/snmptt

To:

* Run command "which snmptthandler" to show you the proper location for the code below

Code: Select all

traphandle default /usr/local/sbin/snmptthandler

Then:

Code: Select all

service snmptrapd restart

Then is should work for you, let us know if it doesn't.

[aap]

Hello,

Ran the command "which snmptthandler" and the output is

/usr/sbin/snmptthandler

Proceeded to amend the /etc/snmp/snmptrapd.conf and restart snmptrapd. However the notifications are still not coming through.

Your assistance is appreciated.

[Box293]

Is there anything logged in /var/log/snmptt/snmptt.log or /var/log/snmptt/snmpttunknown.log when a trap is sent to the XI server?

When you stop the snmptt service, do traps spool in the /var/spool/snmptt/ directory?

[aap]

Hi,

As I mentioned in my original post, yes, I can see the messages in /var/log/snmptt/snmptt.log. The issue is that the messages are not being transferred as notifications nor do they appear in the Nagios status information for SNMP traps.

[ssax]

Please post an example from your snmptt log for one that is not being sent into Nagios so that I can dig further.

[aap]

Hi,

Please see example below from the snmptt.log

Mon May 25 22:02:03 2015 enterprises.18494.2.0.1 CRITICAL "Status Events" lnaplnXXXX - The following event was generated via Alliance Access. Communications Server reports Host CREST;L is down

No notification was received for this alert neither was it displayed on the SNMP traps Status information for this host.