Nagios Trap Forwarding - Worker Node to XI

[veeravamsi]

Hi Team,

I want to understand if we can Forward Traps received on Worker Node onto XI , by retaining the Original Sender IP . Any documentation of Steps available for this kind of Configuration ?

--Vamsi

[tgriep]

To get the Hostname or IP address of the original device that sent the trap, you would have to use the following variables for the SNMP Trap configuration settings on the XI server.

$A - Trap agent host name
$aA - Trap agent IP address

Login to the Admin > SNMP Trap Interface menu if it is on your system and go to the Defined Trap Tab.
Edit a Trap and in the Passive section, replace the $r in the Host Name field with one of the above.

If you want to use Hostnames, the devices sending the originally trap has to be setup in DNS and the Nagios server has to be able to access those DNS server.
Else, they will be the IP address.

[veeravamsi]

Thanks . We are not utilizing SNMP Trap Interface because of Integrations , so we are relying on Service Monitor (SNMP Traps or Passive ) as Service Monitor Status would be available for Event Integration over API.

So does this require editing different configuration files on the system ?

[tgriep]

Are you still using snmptrapd to receive the traps and the snmptt daemon to translate them?
If so, then you would edit the /etc/snmp/snmptt.conf file and edit the EXEC line and change the variables like I posted earlier.

If you are not using the snmptt daemon, then we would need some details on what is receiving the traps, translating then and forwarding them on to Nagios.

[veeravamsi]

We are using below Modules on RHEL System :

Systemctl enable /usr/sbin/snmptrapd
Chkconfig snmptrapd on

And below two lines in /etc/snmp/snmptrapd.conf :

disableAuthorization yes
forward default <NagiosPrimaryServerAddress>

[tgriep]

Let me know if I have it right.

You are sending SNMP Traps to a RHEL system that has the snmptrapd setup to forward the Traps to the Nagios XI server, am I correct?
You do not want to use the SNMP Trap Interface to receive the traps on the XI server so they can be received as a Passive service check. correct?


When you said this in your earlier post.
We are not utilizing SNMP Trap Interface because of Integrations , so we are relying on Service Monitor (SNMP Traps or Passive ) as Service Monitor Status would be available for Event Integration over API.

What is the "Service Monitor" and how does it work?

[veeravamsi]

Coming back on this one as NOW we have Trap Definitions defined on SNMP Trap Interface & Passive Service Monitors to receive/consume .

What changes should i make to consume incoming Traps from "Worker Node - ModGearman Configuration" to retain Original Sender IPAddress so that - Traps are mapped to right Device ( not default Worker Node ).

Wondering if the variable in screenshot attached would help us ?

ReplaceVariable.PNG

[tgriep]

Yes, that is the variable you will have to edit to get the original address.

You would use one of these variables in place if the $r.

$A - Trap agent host name
$aA - Trap agent IP address

More details on the variables that the snmptt translator daemon can use are at the following link.
http://snmptt.sourceforge.net/docs/snmp ... ile-format

[veeravamsi]

Awesome . Thank you !!

You can go ahead and close this thread .

[scottwilkerson]

Awesome . Thank you !!

You can go ahead and close this thread .

Great!

Closing thread