Page 1 of 1
Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 01, 2020 2:35 am
by veeravamsi
Hi Team,
I want to understand if we can Forward Traps received on Worker Node onto XI , by retaining the Original Sender IP . Any documentation of Steps available for this kind of Configuration ?
--Vamsi
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 01, 2020 3:52 pm
by tgriep
To get the Hostname or IP address of the original device that sent the trap, you would have to use the following variables for the SNMP Trap configuration settings on the XI server.
$A - Trap agent host name
$aA - Trap agent IP address
Login to the Admin > SNMP Trap Interface menu if it is on your system and go to the Defined Trap Tab.
Edit a Trap and in the Passive section, replace the $r in the Host Name field with one of the above.
If you want to use Hostnames, the devices sending the originally trap has to be setup in DNS and the Nagios server has to be able to access those DNS server.
Else, they will be the IP address.
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Wed Sep 02, 2020 8:54 am
by veeravamsi
Thanks . We are not utilizing SNMP Trap Interface because of Integrations , so we are relying on Service Monitor (SNMP Traps or Passive ) as Service Monitor Status would be available for Event Integration over API.
So does this require editing different configuration files on the system ?
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Thu Sep 03, 2020 8:49 am
by tgriep
Are you still using snmptrapd to receive the traps and the snmptt daemon to translate them?
If so, then you would edit the /etc/snmp/snmptt.conf file and edit the EXEC line and change the variables like I posted earlier.
If you are not using the snmptt daemon, then we would need some details on what is receiving the traps, translating then and forwarding them on to Nagios.
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 08, 2020 7:24 am
by veeravamsi
We are using below Modules on RHEL System :
Systemctl enable /usr/sbin/snmptrapd
Chkconfig snmptrapd on
And below two lines in /etc/snmp/snmptrapd.conf :
disableAuthorization yes
forward default <NagiosPrimaryServerAddress>
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 08, 2020 3:27 pm
by tgriep
Let me know if I have it right.
You are sending SNMP Traps to a RHEL system that has the snmptrapd setup to forward the Traps to the Nagios XI server, am I correct?
You do not want to use the SNMP Trap Interface to receive the traps on the XI server so they can be received as a Passive service check. correct?
When you said this in your earlier post.
We are not utilizing SNMP Trap Interface because of Integrations , so we are relying on Service Monitor (SNMP Traps or Passive ) as Service Monitor Status would be available for Event Integration over API.
What is the "Service Monitor" and how does it work?
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 15, 2020 12:59 am
by veeravamsi
Coming back on this one as NOW we have Trap Definitions defined on SNMP Trap Interface & Passive Service Monitors to receive/consume .
What changes should i make to consume incoming Traps from "Worker Node - ModGearman Configuration" to retain Original Sender IPAddress so that - Traps are mapped to right Device ( not default Worker Node ).
Wondering if the variable in screenshot attached would help us ?
ReplaceVariable.PNG
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Tue Sep 15, 2020 11:00 am
by tgriep
Yes, that is the variable you will have to edit to get the original address.
You would use one of these variables in place if the $r.
$A - Trap agent host name
$aA - Trap agent IP address
More details on the variables that the snmptt translator daemon can use are at the following link.
http://snmptt.sourceforge.net/docs/snmp ... ile-format
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Wed Sep 16, 2020 8:41 am
by veeravamsi
Awesome

. Thank you !!
You can go ahead and close this thread .
Re: Nagios Trap Forwarding - Worker Node to XI
Posted: Wed Sep 16, 2020 11:11 am
by scottwilkerson
veeravamsi wrote:Awesome

. Thank you !!
You can go ahead and close this thread .
Great!
Closing thread