Displaying multiple traps in Nagios XI

[MSPk]

Hi,
We were supposed to integrate the Solarwinds monitoring tool with Nagios XI i.e Solarwinds should send all the alerts to Nagios.
We selected SNMP traps integration for this purpose!

Finally we managed to get the traps into Nagios, but now the problem here is Solarwinds generates multiple traps from various devices and forwards it to Nagios. All those alerts from various devices that are present in Solarwinds is important to us.
But Nagios displays only the latest trap from the Solarwinds in a single line.

trap alert.jpg

We would like to see all the alerts coming into Nagios, the reason being is Nagios is acting like "Manager of Monitors".

I don't see an option of getting all the traps at once and displaying them in Nagios, its per host only one latest trap. Anybody has faced the same issue or can anyone help me with this issue?


Thank you!

[scottwilkerson]

I have one of the guys here trying a couple things to see if we can grab one of the values from the trap to set the host, but if successful you would need to add each of the hosts to XI (if not already) and add the trap service.

You can view all of the traps in XI via the State History Report filtering to just the solarwinds host

[scottwilkerson]

So this will take a bit of fiddling, but if you take a look at your /var/log/snmptt/snmptt.log

you will see something like this

Code: Select all

Wed Jun 19 06:55:13 2013: Unknown trap (.1.3.6.1.4.1.11307.10) received from ip-10-0-0-10 at:
Value 0: ip-10-0-0-10
Value 1: 10.0.0.10
Value 2: 0:0:00:00.00
Value 3: .1.3.6.1.4.1.11307.10
Value 4: 10.0.0.10
Value 5:
Value 6: .1.3.6.1.4.1.11307
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.11307.10.2=solarwinds
Ent Value 1: .1.3.6.1.4.1.11307.10.3=10.0.0.10
Ent Value 2: .1.3.6.1.4.1.11307.10.4=1
Ent Value 3: .1.3.6.1.4.1.11307.10.5=solarwinds
Ent Value 4: .1.3.6.1.4.1.11307.10.6=Node
Ent Value 5: .1.3.6.1.4.1.11307.10.7=1
Ent Value 6: .1.3.6.1.4.1.11307.10.1=
Ent Value 7: .1.3.6.1.4.1.11307.10.8=Alert me when a node goes down

I am going to presume that one of the "Ent Value"'s is going to match up with a machine name (hopefully)...

If so, you will need to edit your entry in /etc/snmp/snmptt.conf changing the $r in the EXEC line to the Ent # +1

For example, if "Ent Value 0" (solarwinds) above contained your host name, you change $r to $1, changing the line read something like

Code: Select all

EXEC /usr/local/bin/snmptraphandling.py "$1" "SNMP Traps" "$s" "$@" "$-*" "The trap indicates $*"

Another example, if "Ent Value 6" (Node) above contained your host name, you change $r to $7, changing the line read something like

Code: Select all

EXEC /usr/local/bin/snmptraphandling.py "$7" "SNMP Traps" "$s" "$@" "$-*" "The trap indicates $*"

[c6391925]

Thank you for all of your help Scott. You have been like a rocket-booster every time our project gets stalled.

I don't believe there is an easy, automatic and practical way to use the idea you outlined above. It will be too difficult to add new servers going forward. We need to make a system that continues to run on "auto pilot". We are hoping that NSTI will be a practical solution. We are stuck on some issue getting traps into NSTI currently.

Thanks again!

GL

[slansing]

Are you and MSPk on the same team? If so, what issues are you running into? If not, please open a new thread with details on your problems. Thanks.

[MSPk]

Thank you Slansing and Scott, We really appreciate your support!
We shall open a new post if required. We can close this as of now.

[slansing]

Ah, excellent! Closing for now.