Page 1 of 1
Displaying multiple traps in Nagios XI
Posted: Thu Jul 04, 2013 10:19 pm
by MSPk
Hi,
We were supposed to integrate the Solarwinds monitoring tool with Nagios XI i.e Solarwinds should send all the alerts to Nagios.
We selected SNMP traps integration for this purpose!
Finally we managed to get the traps into Nagios, but now the problem here is Solarwinds generates multiple traps from various devices and forwards it to Nagios. All those alerts from various devices that are present in Solarwinds is important to us.
But Nagios displays only the latest trap from the Solarwinds in a single line.
trap alert.jpg
We would like to see all the alerts coming into Nagios, the reason being is Nagios is acting like "Manager of Monitors".
I don't see an option of getting all the traps at once and displaying them in Nagios, its per host only one latest trap. Anybody has faced the same issue or can anyone help me with this issue?
Thank you!
Re: Displaying multiple traps in Nagios XI
Posted: Mon Jul 08, 2013 1:55 pm
by scottwilkerson
I have one of the guys here trying a couple things to see if we can grab one of the values from the trap to set the host, but if successful you would need to add each of the hosts to XI (if not already) and add the trap service.
You can view all of the traps in XI via the State History Report filtering to just the solarwinds host
Re: Displaying multiple traps in Nagios XI
Posted: Mon Jul 08, 2013 2:26 pm
by scottwilkerson
So this will take a bit of fiddling, but if you take a look at your /var/log/snmptt/snmptt.log
you will see something like this
Code: Select all
Wed Jun 19 06:55:13 2013: Unknown trap (.1.3.6.1.4.1.11307.10) received from ip-10-0-0-10 at:
Value 0: ip-10-0-0-10
Value 1: 10.0.0.10
Value 2: 0:0:00:00.00
Value 3: .1.3.6.1.4.1.11307.10
Value 4: 10.0.0.10
Value 5:
Value 6: .1.3.6.1.4.1.11307
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.11307.10.2=solarwinds
Ent Value 1: .1.3.6.1.4.1.11307.10.3=10.0.0.10
Ent Value 2: .1.3.6.1.4.1.11307.10.4=1
Ent Value 3: .1.3.6.1.4.1.11307.10.5=solarwinds
Ent Value 4: .1.3.6.1.4.1.11307.10.6=Node
Ent Value 5: .1.3.6.1.4.1.11307.10.7=1
Ent Value 6: .1.3.6.1.4.1.11307.10.1=
Ent Value 7: .1.3.6.1.4.1.11307.10.8=Alert me when a node goes down
I am going to presume that one of the "Ent Value"'s is going to match up with a machine name (hopefully)...
If so, you will need to edit your entry in /etc/snmp/snmptt.conf changing the $r in the EXEC line to the Ent # +1
For example, if "Ent Value 0" (solarwinds) above contained your host name, you change $r to $1, changing the line read something like
Code: Select all
EXEC /usr/local/bin/snmptraphandling.py "$1" "SNMP Traps" "$s" "$@" "$-*" "The trap indicates $*"
Another example, if "Ent Value 6" (Node) above contained your host name, you change $r to $7, changing the line read something like
Code: Select all
EXEC /usr/local/bin/snmptraphandling.py "$7" "SNMP Traps" "$s" "$@" "$-*" "The trap indicates $*"
Re: Displaying multiple traps in Nagios XI
Posted: Tue Jul 09, 2013 4:23 pm
by c6391925
Thank you for all of your help Scott. You have been like a rocket-booster every time our project gets stalled.
I don't believe there is an easy, automatic and practical way to use the idea you outlined above. It will be too difficult to add new servers going forward. We need to make a system that continues to run on "auto pilot". We are hoping that NSTI will be a practical solution. We are stuck on some issue getting traps into NSTI currently.
Thanks again!
GL
Re: Displaying multiple traps in Nagios XI
Posted: Tue Jul 09, 2013 4:34 pm
by slansing
Are you and MSPk on the same team? If so, what issues are you running into? If not, please open a new thread with details on your problems. Thanks.
Re: Displaying multiple traps in Nagios XI
Posted: Fri Jul 12, 2013 3:48 am
by MSPk
Thank you Slansing and Scott, We really appreciate your support!
We shall open a new post if required. We can close this as of now.
Re: Displaying multiple traps in Nagios XI
Posted: Fri Jul 12, 2013 9:25 am
by slansing
Ah, excellent! Closing for now.