SNMPTRAP REGEXP not working as expected

[nms_allinone]

i am able to receive snmptraps and email notification but i am not able to make accurate with use of regexp as i wanted. i want to display interface Descr. from IFMIB in the event but as soon as i use the regexp it throw me full log message of snmptrap. any suggestion solution will be highly appreciated...below are my try

ITEAM :






=======================
Trigger Name and Condition
=======================
Interface {{ITEM.LASTVALUE}.regsub(IF-MIB::ifDescr.*"(.*)")} is down on {HOST.HOST} ( i have cheked regex101.com IF-MIB::ifDescr.*"(.*)" matching the condition from snmptap raw data as show below )


2024-03-05T06:13:12+0000 ZBXTRAP 192.168.253.73
PDU INFO:
messageid 0
errorindex 0
receivedfrom UDP: [192.168.253.73]:57644->[192.168.253.78]:162
errorstatus 0
transactionid 40
community public
version 1
requestid 38
notificationtype TRAP
VARBINDS:
DISMAN-EVENT-MIB::sysUpTimeInstance type=67 value=Timeticks: (16152623) 1 day, 20:52:06.23
SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: IF-MIB::linkUp
IF-MIB::ifIndex.8 type=2 value=INTEGER: 8
IF-MIB::ifDescr.8 type=4 value=STRING: "Loopback100"
IF-MIB::ifType.8 type=2 value=INTEGER: 24
SNMPv2-SMI::enterprises.9.2.2.1.1.20.8 type=4 value=STRING: "up"

2024-03-05T06:15:23+0000 ZBXTRAP 192.168.253.73
PDU INFO:
messageid 0
receivedfrom UDP: [192.168.253.73]:57644->[192.168.253.78]:162
errorstatus 0
errorindex 0
transactionid 41
community public
version 1
requestid 40
notificationtype TRAP
VARBINDS:
DISMAN-EVENT-MIB::sysUpTimeInstance type=67 value=Timeticks: (16165738) 1 day, 20:54:17.38
SNMPv2-MIB::snmpTrapOID.0 type=6 value=OID: IF-MIB::linkDown
IF-MIB::ifIndex.8 type=2 value=INTEGER: 8
IF-MIB::ifDescr.8 type=4 value=STRING: "Loopback100"
IF-MIB::ifType.8 type=2 value=INTEGER: 24
SNMPv2-SMI::enterprises.9.2.2.1.1.20.8 type=4 value=STRING: "administratively down"


what i wanted to dispay is interface <REGEXP MATCH> is down on <HOST>

[nms_allinone]

finally its working i have used this int trigger and tag : Interface {{ITEM.VALUE}.regsub("IF-MIB::link(Down|Up).*"(.*)"", "\1")} {{ITEM.VALUE}.regsub("ifDescr.*"(.*)"", "\1")} is down on {HOST.HOST}

[nms_allinone]

also it works only with public community trap. if i send trap with othercommunity its not coming.
in snmptrapd.conf i am having below lines
authCommunity log,execute,net public
authCommunity log,execute,net ciscosnmp

[cyber]

regsub also requires you to specify, which match group you want to show... so {{ITEM.LASTVALUE}.regsub("IF-MIB::ifDescr.*"(.*)"","\1")}

[nms_allinone]

same error no luck...where i am doing wrong ?

[ZaBeast]

Trigger Name:
Interface {{ITEM.VALUE}.regsub("ifDescr.*"(.*)"", "\1")} is down on {HOST.HOST}


Tags→Trigger tags:
Name: interface
Value: {{ITEM.VALUE}.regsub("ifDescr.*"(.*)"", "\1")}

You can find more information and examples in my tutorial:

https://bestmonitoringtools.com/tutorial-snmp-traps-on-zabbix/

[nms_allinone]

Interface {{ITEM.LASTVALUE}.regsub("IF-MIB::ifDescr.*"(.*)"","\1")} is down on {HOST.HOST} and also tried with ITEM.VALUE same issue.

[nms_allinone]

thanks for well documentation on snmptrap. i have added comment with solution. may be you can make more simple way.

[nms_allinone]

tried as suggested same issue

[nms_allinone]

finally its working i have used this int trigger and tag : Interface {{ITEM.VALUE}.regsub("IF-MIB::link(Down|Up).*"(.*)"", "\1")} {{ITEM.VALUE}.regsub("ifDescr.*"(.*)"", "\1")} is down on {HOST.HOST}

[nms_allinone]

{first condition match Down|Up} and {second condition match ifDescr} in my case it matches name Loopback201 as per image