Page 1 of 1

Nagiox XI does not send trap for Normal "Status Events"

Posted: Wed Sep 19, 2018 9:43 pm
by nfv_nagios
Hi Support

I am running NagiosXI 5.4.0. I am facing a problem with configuring NagiosXI to forward SNMP TRAP event status Normal to upstream monitoring host. Can you please advise?

I have configured NagiosXI to receive SNMP Traps. Received traps are logged in /var/log/snmptt/snmptt.log successfully.

When NagiosXI recieve SNMP TRAP event status with Critical, Major, Minor, it will generate SNMP trap for upstream monitoring host and these are logged in /usr/local/nagiosxi/var/eventman.log

However when Nagios XI recieve SNMP TRAP event status Normal, i see the event gets processed in snmptt.log but don't see it pass on to eventman.log

snmptt.debug
Translated to northboundKeepALiveTrap
EXEC command:/usr/local/bin/snmptraphandling.py "10.X.X.X" "SNMP Traps" "Normal" "1537372896" "" "Host:usgst.abc.com; SvcDesc: The keep-a-live trap."
Processing file: #snmptt-trap-1537372899610270
Reading trap. Current time: Thu Sep 20 00:01:41 2018

I have already tried adding the forward default X.X.X.X:162 to /etc/snmp/snmptrapd.conf file

[root@COMMON-NAGIOS-01 snmptt]# cat /etc/snmp/snmptrapd.conf
disableAuthorization yes
perl do "/usr/sbin/snmptthandler-embedded";
forward default 10.X.X.X:162

Re: Nagiox XI does not send trap for Normal "Status Events"

Posted: Thu Sep 20, 2018 4:14 pm
by tgriep
If you want to forward the traps the Nagios server receives to another server and also receive the trap on the XI server you need to enable the net type:
Edit this file

Code: Select all

/etc/snmp/snmptrapd.conf   


It would have to be setup like this example. Replace xxx.xxx.xxx.xxx with the IP address of the system you want to forward the traps to.

Code: Select all

disableAuthorization yes
traphandle default /usr/sbin/snmptthandler
authCommunity log,net public
forward default xxx.xxx.xxx.xxx public
Save the file and restart the snmptrapd daemon by running

Code: Select all

service snmptrapd restart

Can you post the entry from the /usr/local/nagiosxi/var/eventman.log file so we can view it?
Can you post the Trap settings for the Normal status and the Critical status from the /etc/snmp/snmptt.conf file?

Thanks