Trap messages, how get more readable format ?

[FildaSmile]

Hello everyone,

Im using Zabbix 5.2 (installed with packages) running on Ubuntu 20.04.

Right now im testing traps, i can recieve them by item: Type: snmp trap, keysnmptrap.fallback, type of information: log.

But problem is when trigger is activated the message looks like this:

trap 10:37:28 2020/12/23 PDU INFO: requestid 67217560 transactionid 5283 version 1 messageid 0 community Altepro_50lutions receivedfrom UDP: [172.25.2.22]:35133->[172.25.1.125]:162 errorindex 0 notificationtype TRAP errorstatus 0 VARBINDS: DISMAN-EXPRESSION-MIB::sysUpTimeInstance type=67 value=Timeticks: (431302909) 49 days, 22:03:49.09 SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: SNMPv2-SMI::enterprises.2011.2.235.1.1.500.10.256.1 SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.1 type=2 value=INTEGER: 4 SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.2 type=4 value=STRING: "test subject--info1.info2" SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.3 type=4 value=STRING: "test event" SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.4 type=2 value=INTEGER: 1 SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.5 type=4 value=STRING: "0x00000001" SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.6 type=2 value=INTEGER: 0 SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.7 type=2 value=INTEGER: 0 SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.8 type=4 value=STRING: "sever identity test" SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.9 type=4 value=STRING: "server room" SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.10 type=4 value=STRING: "1970-01-01 00:00:00"

When i open last data and check the item (mentioned above) i can see something like this , it looks better (how it is posibble ? idk ..) but still there are lot of useless text:

01/05/2021 09:51:39 AM
08:51:37 2021/01/05 PDU INFO:
community Altepro_50lutions
version 1
errorstatus 0
receivedfrom UDP: [172.25.2.22]:56319->[172.25.1.125]:162
transactionid 15
messageid 0
requestid 67217603
errorindex 0
notificationtype TRAP
VARBINDS:
DISMAN-EXPRESSION-MIB::sysUpTimeInstance type=67 value=Timeticks: (542987395) 62 days, 20:17:53.95
SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: SNMPv2-SMI::enterprises.2011.2.235.1.1.500.10.256.1
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.1 type=2 value=INTEGER: 5
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.2 type=4 value=STRING: "test subject--info1.info2"
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.3 type=4 value=STRING: "test event"
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.4 type=2 value=INTEGER: 1
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.5 type=4 value=STRING: "0x00000001"
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.6 type=2 value=INTEGER: 0
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.7 type=2 value=INTEGER: 0
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.8 type=4 value=STRING: "sever identity test"
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.9 type=4 value=STRING: "server room"
SNMPv2-SMI::enterprises.2011.2.235.1.1.500.1.10 type=4 value=STRING: "1970-01-01 00:00:00"

I tried find out how i can do it better, i find lots of items "SNMP trap" in my template for server (huawei rack server) i made template via mib2zabbix

These items are also snmptrap items, but not fallback, these are regexp (regular expressions), they have this key: snmptrap["\s\.1\.3\.6\.1\.4\.1\.2011\.2\.235\.1\.1\.500\.11 \.30\.3\s"]

Im not sure if this key is in good format or not, maybe i should simulate trap and send it from some linux machine and use oid mentioned in key above ?

In the end i would like display f.e. only "server identity test" or "CPU overheating" , "psu1 is out of range" these sentences are in the trap but there is lot of unusable text and that is problem, because it take lot of space on the dashboard.

Can you give me advice how do it ?

Thank you in advance.

Filip

[Hamardaban]

In order to manipulate the contents of the trap, you can use snmptt.
The flow diagram is as follows: (device) >-network-> (snmptrapd -> snmptt -> zabbixtrapfile -> zabbix)(https://www.zabbix.com/documentation...types/snmptrap)
See the documentation for how to configure snmptt for trap format http://www.snmptt.org/docs/snmptt.shtml