Unsolved
This post is more than 5 years old
8 Posts
0
721
UnknownAgent in TrapDefinition
Hi All,
I have a question regarding the UnknownAgent property used in the Trap Definitions.I believe it is not mandatory to use the property in a trap definition.
So what would be the default value of the property when we do not define the property ?
Thanks and regards,
karthik Shandilya
PaulORourke
170 Posts
1
March 13th, 2013 01:00
Hi Karthik,
Your trap_mgr.conf file should include the default rule before any TRAP Defintion.
The default rule is mandatory and should include the default value for the UnknownAgent setting.
Please see an example of the default rule below.
BEGIN_DEFAULTS
ClassName: SNMPTrap
InstanceName: $SYS$
EventName: $E$ $N$ $S$
Severity: 2
EventText: Varbinds: $V*$
Expiration: 7200
State: NOTIFY
InMaintenance: FALSE
ClearOnAcknowledge: TRUE
EventType: MOMENTARY
SysNameOrAddr: $A$
UnknownAgent: IGNORE
LogFile: NONE
END_DEFAULTS
Kind Regards,
Paul O'Rourke
Anonymous
274.2K Posts
1
March 23rd, 2013 07:00
karthik,
The default for UnknownAgent is "IGNORE", so if a trap comes in from a source unknown to Smarts, OI will just dump the trap, it will not send it to SAM for displaoy. If you set the value to "CREATE", OI will accept the trap and it will also create a new object in the Host class for the device sending the Trap.
Tom
kashan1
8 Posts
0
March 28th, 2013 02:00
So if an object for the source is created, lets say an IP object and a host object both associated with each other , then the alarm will get notified . Isn't it ?
PaulORourke
170 Posts
0
March 28th, 2013 08:00
Hi Kashan,
Yes this is correct.
If UnknownAgent:IGNORE -> OI drops the notification.
If UnknownAgent: Create -> OI will create a local IP instance in its rps and use the ElementInstance name from the notification as the IP->HostedBy attribute.
Kind Regards,
Paul O'Rourke