Ad Widget

Collapse

Ignoring some SNMP traps

Collapse
This topic has been answered.
X
X
 
  • Time
  • Show
Clear All
new posts
  • albatrosdk
    Junior Member
    • Mar 2018
    • 13

    #1

    Ignoring some SNMP traps

    Hi guys,

    We have a setup where an external system sends us SNMP traps. Some of these traps don't contain any relevant information and are just heartbeat messages.

    They contain the phrase "PERIODICAL TRAP" in one of their OIDs.

    Is there a way we can get Zabbix to just throw away these traps? We don't want to do it on the SNMP receiving side(snmptrapd or the traphandler/parser). So something like a preprocessing regex would be nice -but my regex-foo is incredibly bad these days.

    Any ideas?

    TIA

    /A
  • Answer selected by albatrosdk at Today, 15:17.
    cyber
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • Dec 2006
    • 4826

    What item are you useing there? snmptrap or snmptrap.fallback ? One picks up specific ones, other picks up everything else. If you only have fallback item and one trigger on top of it, you need to start building exceptions there, with regex..:P Or start making matching triggers for specific matches... regex101.com will help you..

    Comment

    • cyber
      Senior Member
      Zabbix Certified SpecialistZabbix Certified Professional
      • Dec 2006
      • 4826

      #2
      What item are you useing there? snmptrap or snmptrap.fallback ? One picks up specific ones, other picks up everything else. If you only have fallback item and one trigger on top of it, you need to start building exceptions there, with regex..:P Or start making matching triggers for specific matches... regex101.com will help you..

      Comment

      • albatrosdk
        Junior Member
        • Mar 2018
        • 13

        #3
        Hi,
        We use snmptrap[], but we decided to implement it in the parser for now since we're not sure if we need the info anyway.

        But thanks for the pointer, I'll look into that just to be on the safe side.

        /A

        Comment

        Working...