Re: Traps - Alarm and clear use the same SNMP trap

Hi Marc,

   I think that "Filtering on varbinds (OpenNMS 1.10 and beyond)" will 
help you from this page: 
https://wiki.opennms.org/wiki/Trap_Configuration_How-To

I've not had to implement this solution myself but I think you solve 
this something like:

Step one - make sure your existing event definition creates an alarm 
with a reduction-key which includes the unique endpoint (e.g Parm[#3])

Step two, define an event which is going to handle just resolution - I 
think it can be cut down without all the varbinds and stuff as you're 
going to be adding a varbind to the event mask.. You'll want to filter 
it based on the value of parm[#4] which means 'resolved' and then set 
the alarm as a type '2' (i.e. cleared), with a reduction-key the same as 
your main definition.

I hope this helps :-)

Regards

Jonathan


On 22/09/17 08:54, Marc Doesburg wrote:
> Hello All,
>
> I’ve 2 questions regarding SNMP traps.
>
> We have a system that sends “the same” trap message for an alarm and a 
> clear. Depending on %parm[#4]% it’s either an alarm or a clear.
>
> I’m able to configure the event as an alarm. But now the clear also 
> generates an alarm in the log and doesn't clear the original alarm.
>
> My first question is: Is there a way to set the severity using 
> %parm[#4]%? So, I don’t have to manually set/configure all the alarm 
> severity’s individually?
>
> My second question is: Can I use %parm[#4]% to clear the previous 
> alarm? Also, the clear needs to be linked to the right original alarm. 
> For example, if the machines lose connection to 2 different end-points 
> (i.e. endpoint A and endpoint B) the clear for endpoint A needs to 
> clear the alarm of endpoint A and not B 😊. I’m not sure yet, but I 
> think %parm[#3]% describes the endpoint.
>
> I’m also not sure if it’s useful, but I’ve added the events.xml for 
> the system I’m trying to configure this for. I’m currently trying to 
> configure it for “AcBoard defined trap event: acIpGroupNoRouteAlarm”, 
> but a lot of the alarms are going to need this.
>
> Thanks in advance for your help.
>
> Best regards,
>
> Marc D.
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> Please read the OpenNMS Mailing List FAQ:
> http://www.opennms.org/index.php/Mailing_List_FAQ
>
> opennms-discuss mailing list
>
> To *unsubscribe* or change your subscription options, see the bottom of this page:
> https://lists.sourceforge.net/lists/listinfo/opennms-discuss

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/index.php/Mailing_List_FAQ

opennms-discuss mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-discuss