Nagios Support Forum

We have a new SNMP integration of Nagios going in but we are in a situation where we are not receiving all the alarms that we expect. Unfortunately I don’t have admin but I’m guessing that some rules are set up somewhere which govern what is forwarded and what is not.

Can anyone help / advise on this?

1. How are you processing the traps on the nagios side? snmptt?
2. Are some traps alerting for a certain device while others do not alert for the same device?
3. Have you installed the mibs for the remote device?
4. How are you matching rules for traps? snmptt.conf?

1. How are you processing the traps on the nagios side? snmptt?

We are processing with a netcool trap probe

2. Are some traps alerting for a certain device while others do not alert for the same device?

We are getting traps from some devices and not others. The only pattern I can see is that we only seem to see alarms where there is a notification in Nagios, so I'm guessing that it's related somehow.

So - I think the pattern is -

Alarm is in Service Status summary, but not in notifications - we don't get the SNMP trap
Alarm is in the Service Status summary - but in notifications - we do get the SNMP trap

3. Have you installed the mibs for the remote device?

Yes

4. How are you matching rules for traps? snmptt.conf?

Netcool rules. I've also run a raw trap capture so I'm certain it's not been dropped by the management system.

1. Check the log: If your traps are ending up here, than the mib has not been processed correctly.
2. Check XI --> Admin --> Unconfigured objects. If the traps are listed here, then they cannot be matched to a current object.
3. Next, check to see if the trap appears in the trap service. If it does, but is not changing status, then check the rule in snmptt.conf as the severity of the trap may not be set correctly:

Thanks for your help. I will pass this on to the system administrator and let you know how we get on

Sounds good thanks!