Nagiox XI does not send trap for Normal "Status Events"

[nfv_nagios]

Hi Support

I am running NagiosXI 5.4.0. I am facing a problem with configuring NagiosXI to forward SNMP TRAP event status Normal to upstream monitoring host. Can you please advise?

I have configured NagiosXI to receive SNMP Traps. Received traps are logged in /var/log/snmptt/snmptt.log successfully.

When NagiosXI recieve SNMP TRAP event status with Critical, Major, Minor, it will generate SNMP trap for upstream monitoring host and these are logged in /usr/local/nagiosxi/var/eventman.log

However when Nagios XI recieve SNMP TRAP event status Normal, i see the event gets processed in snmptt.log but don't see it pass on to eventman.log

snmptt.debug
Translated to northboundKeepALiveTrap
EXEC command:/usr/local/bin/snmptraphandling.py "10.X.X.X" "SNMP Traps" "Normal" "1537372896" "" "Host:usgst.abc.com; SvcDesc: The keep-a-live trap."
Processing file: #snmptt-trap-1537372899610270
Reading trap. Current time: Thu Sep 20 00:01:41 2018

I have already tried adding the forward default X.X.X.X:162 to /etc/snmp/snmptrapd.conf file

[root@COMMON-NAGIOS-01 snmptt]# cat /etc/snmp/snmptrapd.conf
disableAuthorization yes
perl do "/usr/sbin/snmptthandler-embedded";
forward default 10.X.X.X:162

[tgriep]

If you want to forward the traps the Nagios server receives to another server and also receive the trap on the XI server you need to enable the net type:
Edit this file

Code: Select all

/etc/snmp/snmptrapd.conf   

It would have to be setup like this example. Replace xxx.xxx.xxx.xxx with the IP address of the system you want to forward the traps to.

Code: Select all

disableAuthorization yes
traphandle default /usr/sbin/snmptthandler
authCommunity log,net public
forward default xxx.xxx.xxx.xxx public

Save the file and restart the snmptrapd daemon by running

Code: Select all

service snmptrapd restart

Can you post the entry from the /usr/local/nagiosxi/var/eventman.log file so we can view it?
Can you post the Trap settings for the Normal status and the Critical status from the /etc/snmp/snmptt.conf file?

Thanks