Grouping of snmptd alarms using a suppression key

book

Article ID: 205487

calendar_today

Updated On:

Products

CA Unified Infrastructure Management On-Premise (Nimsoft / UIM) NIMSOFT PROBES DX Infrastructure Management

Issue/Introduction

Management of some SNMPTD alarms. Message suppression is set to the defaults.

We are getting high alarm counts for these two alarms. One set of alarms is coming from a Secondary Relay which represents a different origin. Also the "FROM:" address may differ as we saw in some of the alarms so the customer does not want those alarms to be grouped and counted as the same alarm. We cannot set the message suppression character number value higher since that will affect all alarms.

Enterprise (.1.3.6.1.4.1.11.2.17.1), Enterprise specific - 1 usxxxxxx-bx04.<country>.<companyname>.<net> Data Protector Critical [Critical] From: xxxxxx \"MXCXXXX-NB08XXXXX_FS_ALL_ST_QB\"  Time: 12/10/2020 3:54:50 AM None of the Disk Agents completed successfully. Session has failed.

Enterprise (.1.3.6.1.4.1.11.2.17.1), Enterprise specific - 1 usxxxxxx-bx04.<country>.<companyname>.<net> Data Protector Critical [Critical] From: xxxxxx \"MXCXXXX-NB08XXXXX_FS_ALL_ST_QB\"  Time: 12/10/2020 3:54:50 AM None of the Disk Agents completed successfully. Session has failed.

Cause

- How to group alarms to be suppressed does not seem to be clearly documented

Environment

Release : 9.2.0

Component : UIM - SNMPTD

Resolution

Grouping of alarms in snmptd can be accomplished using variables and by adding a suppression key. Then the count of those specific alarms will increase and not be treated as a single alarm.

'SNMP Trap Monitor' displays all the available variables and in this case $6 was the trap 'message string' and that's what was used to group LIKE alarms.

It's best to use/browse the traps via the SNMP Trap monitor and then examine the trap itself to see all of the available trap variables and note their values and then take note of the variable number (#). In the SNMP trap monitor details you can examine the variable # and the value of the variable.

Set the suppression key under the Generic Tab in snmptd, as a global setting, but note that a suppkey can be set for each alarm if necessary. You can also set the default global severity - see Generic Tab.

 

 

Attachments