Hi everybody,
can you please help me with a problem on which I have stumbled and I cannot find a solution anywhere.
I am trying to create alarm based on received TRAP. If i use generic fallback function, it creates alarm but do not register (inform) if i receive new TRAP in fallback period (default 300 s)
I have tried to create new trigger ({SNMP trap receiver:snmptrap[].regexp(TRAP)}<>0 and {SNMP trap receiver:snmptrap[].nodata(30)}=0) but there is anomaly which I dont understand. As you can se i have created trigger which will raise alarm on every TRAP which consists word "TRAP". I have also created "clock" which will hold alarm raised for 30 seconds.
Problem is that it works fine, with anomaly. It creates more than one alarm for just one received TRAP
As you can see from the posted images, TRAP was received at 10:00:10, and alarm was created at 10:00:10 and 10:00:30 which is some ghost alarm.
Can you please help me if there is any other way to alarm on received trap and have alarm active for defined time (eg. 30 seconds)
Thank you
can you please help me with a problem on which I have stumbled and I cannot find a solution anywhere.
I am trying to create alarm based on received TRAP. If i use generic fallback function, it creates alarm but do not register (inform) if i receive new TRAP in fallback period (default 300 s)
I have tried to create new trigger ({SNMP trap receiver:snmptrap[].regexp(TRAP)}<>0 and {SNMP trap receiver:snmptrap[].nodata(30)}=0) but there is anomaly which I dont understand. As you can se i have created trigger which will raise alarm on every TRAP which consists word "TRAP". I have also created "clock" which will hold alarm raised for 30 seconds.
Problem is that it works fine, with anomaly. It creates more than one alarm for just one received TRAP
As you can see from the posted images, TRAP was received at 10:00:10, and alarm was created at 10:00:10 and 10:00:30 which is some ghost alarm.
Can you please help me if there is any other way to alarm on received trap and have alarm active for defined time (eg. 30 seconds)
Thank you
Attached Files
Comment