No Trap Notifications

[bashar.abed]

Hi,

We have nagios XI version 5.4.13 VM machine ,

we have problem in Traps notifications please check attached pcap traps sent from nagios and no SMS notification send to admins
we checked MIB's Files and we found MIB's are loaded and OID in send trap exist snmptt.conf please check why SMS not send to admins

Thanks

[cdienger]

Do you see the traps in the XI dashboard? Do they show up in /usr/local/nagios/var/nagios.log?

First it needs to be confirmed that snmptraps that are coming in are being sent to and processed by Nagios. Use https://assets.nagios.com/downloads/nag ... ios_XI.pdf to verify the snmptt integration and if that seems to be working, use https://assets.nagios.com/downloads/nag ... ios-XI.pdf to verify the notification configuraiton for your user.

[bashar.abed]

Hi,

the MIB already added to Nagios System and the nagios received OID like 1.3.6.1.4.1.3830.1.1.2.2.2 but in snmptt.conf we found this OID

1.3.6.1.4.1.3830.1.1.2.2.2.0.0 and the event for this OID is normal the admin send event from this OID 1.3.6.1.4.1.3830.1.1.2.2.2 but the nagios don't send any notifications

and when apply this command to see the logs we see the below from SMJL41.CMG.COM server

[root@nms ~]# cat /usr/local/nagios/var/nagios.log | grep SMJL41.CMG.COM
[1532898000] CURRENT HOST STATE: SMJL41.CMG.COM;UP;HARD;1;OK - 10.100.20.253: rta 1.249ms, lost 0%
[1532898000] CURRENT SERVICE STATE: SMJL41.CMG.COM;CPU Usage;OK;HARD;1;4 CPU, average load 1.2% < 90% : OK
[1532898000] CURRENT SERVICE STATE: SMJL41.CMG.COM;SNMP Traps;OK;HARD;1;OK: TRAP RESET

please your help about this issue

[tgriep]

In your snmptt.conf file, did you create a custom event entry so when that OID it received, it will create a Critical or Warning event which will trigger an email notification?

If you have not done so, take a look at this KB article.
https://support.nagios.com/kb/article/n ... al-77.html

In this section "Create Custom Events In SNMPTT" are the steps needed to create the custom trap entries.

[bashar.abed]

Hi,
please check events entry in snmptt.conf for the needed or ID and still no traps received

[root@nms ~]# cat snmptt.conf | grep 1.3.6.1.4.1.3830.1.1.2.2.2
cat: snmptt.conf: No such file or directory
You have new mail in /var/spool/mail/root
[root@nms ~]# more /etc/snmp/snmptt.conf | grep 1.3.6.1.4.1.3830.1.1.2.2.2
EVENT opcomColdStartTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.0 "Status Events" Warning
EVENT opcomWarmStartTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.1 "Status Events" Normal
EVENT opcomTerminationTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.2 "Status Events" Normal
EVENT internalOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.10 "Status Events" Normal
EVENT internalOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.50 "Status Events" Normal
EVENT internalOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.51 "Status Events" Critical
EVENT internalOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.52 "Status Events" Warning
EVENT internalOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.53 "Status Events" Normal
EVENT internalOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.54 "Status Events" Warning
EVENT internalOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.55 "Status Events" Normal
EVENT externalOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.11 "Status Events" Normal
EVENT externalOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.110 "Status Events" Normal
EVENT externalOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.111 "Status Events" Critical
EVENT externalOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.112 "Status Events" Warning
EVENT externalOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.113 "Status Events" Normal
EVENT externalOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.114 "Status Events" Warning
EVENT externalOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.115 "Status Events" Normal
EVENT notagOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.998 "Status Events" Normal
EVENT notagOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9980 "Status Events" Normal
EVENT notagOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9981 "Status Events" Critical
EVENT notagOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9982 "Status Events" Warning
EVENT notagOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9983 "Status Events" Normal
EVENT notagOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9984 "Status Events" Warning
EVENT notagOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9985 "Status Events" Normal
EVENT unknownOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.999 "Status Events" Normal
EVENT unknownOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9990 "Status Events" Normal
EVENT unknownOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9991 "Status Events" Critical
EVENT unknownOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9992 "Status Events" Warning
EVENT unknownOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9993 "Status Events" Normal
EVENT unknownOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9994 "Status Events" Warning
EVENT unknownOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9995 "Status Events" Normal
EVENT opcomColdStartTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.0 "Status Events" Normal
EVENT opcomWarmStartTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.1 "Status Events" Normal
EVENT opcomTerminationTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.2 "Status Events" Normal
EVENT internalOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.10 "Status Events" Normal
EVENT internalOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.50 "Status Events" Normal
EVENT internalOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.51 "Status Events" Normal
EVENT internalOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.52 "Status Events" Normal
EVENT internalOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.53 "Status Events" Normal
EVENT internalOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.54 "Status Events" Normal
EVENT internalOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.55 "Status Events" Normal
EVENT externalOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.11 "Status Events" Normal
EVENT externalOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.110 "Status Events" Normal
EVENT externalOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.111 "Status Events" Normal
EVENT externalOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.112 "Status Events" Normal
EVENT externalOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.113 "Status Events" Normal
EVENT externalOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.114 "Status Events" Normal
EVENT externalOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.115 "Status Events" Normal
EVENT notagOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.998 "Status Events" Normal
EVENT notagOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9980 "Status Events" Normal
EVENT notagOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9981 "Status Events" Normal
EVENT notagOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9982 "Status Events" Normal
EVENT notagOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9983 "Status Events" Normal
EVENT notagOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9984 "Status Events" Normal
EVENT notagOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9985 "Status Events" Normal
EVENT unknownOpcomTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.999 "Status Events" Normal
EVENT unknownOpcomIndeterminateTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9990 "Status Events" Normal
EVENT unknownOpcomCriticalTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9991 "Status Events" Normal
EVENT unknownOpcomMajorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9992 "Status Events" Normal
EVENT unknownOpcomMinorTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9993 "Status Events" Normal
EVENT unknownOpcomWarningTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9994 "Status Events" Normal
EVENT unknownOpcomClearTrap .1.3.6.1.4.1.3830.1.1.2.2.2.0.9995 "Status Events" Normal

Thanks

[tgriep]

We would need to see the SNMP configuration files and the MIB files from the server so can you run the following 3 commands as root.

Code: Select all

tar cvfz /tmp/snmp.tgz /etc/snmp/*
tar cvfz /tmp/sharesnmp.tgz /usr/share/snmp/mibs/*
tar cvfz /tmp/snmplog.tgz /var/log/snmptt/*

Then post these 3 files so i can check the settings and the MIB files for any errors.

Code: Select all

/tmp/snmp.tgz
/tmp/sharesnmp.tgz
/tmp/snmplog.tgz