I have sonicwalls in my infrastructure and was wondering if you would be willing to share how you got them to report into SCOM.
dmorri wrote:
HP ProCurve SNMP Traps Alert Description
24-Mar-08
I have setup our SCOM to monitor NetAPP, Sonicwall, and ProCurve devices. I
have got the NetAPP and Sonicwall traps to contain the description of the
trap in the alert that SCOM generates and it works great, but I can not get
it to work with the ProCurves.
For the NetAPP the variable is
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$ and under the
alert context I can see the description of an alert, but for the ProCurves I
can't seem to even see the alert description under alert context. Is there
another variable to pull snmp trap alert descriptions?
I have tried $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[2]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ etc..
If I use snmptrapwatcher from BTT it gets the alert description from the
traps. which is what I want SCOM to get.
Previous Posts In This Thread:
On Monday, March 24, 2008 12:16 PM
dmorri wrote:
HP ProCurve SNMP Traps Alert Description
I have setup our SCOM to monitor NetAPP, Sonicwall, and ProCurve devices. I
have got the NetAPP and Sonicwall traps to contain the description of the
trap in the alert that SCOM generates and it works great, but I can not get
it to work with the ProCurves.
For the NetAPP the variable is
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$ and under the
alert context I can see the description of an alert, but for the ProCurves I
can't seem to even see the alert description under alert context. Is there
another variable to pull snmp trap alert descriptions?
I have tried $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[2]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ etc..
If I use snmptrapwatcher from BTT it gets the alert description from the
traps. which is what I want SCOM to get.
On Tuesday, March 25, 2008 11:03 AM
dmorri wrote:
I have already tried that. Said that in my original post.
I have already tried that. Said that in my original post.
" I have trie
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[2]/Value
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ etc...
"Anders Bengtsson [MVP]" wrote:
On Thursday, March 27, 2008 5:57 AM
Anders Bengtsson [MVP] wrote:
Hi Dan,Try $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value$ for
Hi Dan
Try $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value$ for rules
and try $Data/Context/SnmpVarBinds/SnmpVarBind[1]/Value$ for monitors
--
Anders Bengtsso
Microsoft MVP - Operations Manage
http://www.contoso.s
D> I have setup our SCOM to monitor NetAPP, Sonicwall, and ProCurv
D> devices. I have got the NetAPP and Sonicwall traps to contain th
D> description of the trap in the alert that SCOM generates and it work
D> great, but I can not get it to work with the ProCurves
D>
D> For the NetAPP the variable i
D> $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$ an
D> under the alert context I can see the description of an alert, bu
D> for the ProCurves I can't seem to even see the alert descriptio
D> under alert context. Is there another variable to pull snmp tra
D> alert descriptions
D>
D> I have trie
D> $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[1]/Value
D> $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[2]/Value
D> $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ etc..
D>
D> If I use snmptrapwatcher from BTT it gets the alert description fro
D> the traps. which is what I want SCOM to get
D>
On Wednesday, May 28, 2008 10:50 AM
Scott wrote:
For my SNMP trap rule, I
For my SNMP trap rule, I used
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[OID='1.3.6.1.4.1.9839.2.1.2.2.0'][1]/Value
and it worked just fine.
"Dan" wrote:
On Wednesday, May 28, 2008 10:58 AM
dmorri wrote:
thanks I'll give that a try.
thanks I'll give that a try. Since you are using SCOM with ProCurves do you
have a problem with the traps being sent even if they are informational. I
have my procurves setup with the SNMP Critical switch and they still send
info and warning traps. I have had a case open with HP for a month, but so
far they are unable to find a solution.
"Scottv" wrote:
On Wednesday, May 28, 2008 12:48 PM
dmorri wrote:
Copied and pasted that right into the alert description and still doesn't
Copied and pasted that right into the alert description and still does not
display the trap description in the alert, it actually gave me a replacement
error.
"Scottv" wrote:
On Wednesday, May 28, 2008 4:19 PM
Dave wrote:
Hi Dan, Any luck with that.
Hi Dan,
Any luck with that.
I have been searching for hours looking for how to do this.
-Dave
"Dan" wrote:
On Thursday, May 29, 2008 10:03 AM
scottv wrote:
Sorry, I misread your original post and replied too quickly.
Sorry, I misread your original post and replied too quickly. I'm not using
Procurves and didn't realize you were having a problem specific to HP. My
problem was identifying the variable differences for SNMP between rules and
monitors.
In my SNMP mp, I was able to use the variable I listed, just changing the
OID to match whatever value I was looking for. Here's an example of one of
my working alerts in case it might help you:
Ecosaire Air Conditioner
($Target/Property[Type="NetLib!Microsoft.SystemCenter.NetworkDevice"]/Name$)
reports High Temperature threshold.
Room Temp:
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[OID='1.3.6.1.4.1.9839.2.1.2.2.0'][1]/Value$
Alarm Set Point:
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[OID='1.3.6.1.4.1.9839.2.1.2.9.0'][1]/Value$
Unit Status:
$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[OID='1.3.6.1.4.1.9839.2.1.3.1.0'][1]/Value$
Dan wrote:
Submitted via EggHeadCafe - Software Developer Portal of Choice
.NET Lock, Logoff, Reboot, Shutdown, Hibernate, Standby
http://www.eggheadcafe.com/tutorials/aspnet/e5ef4e3e-6f42-4b9b-8834-04366ce32c96/net-lock-logoff-reboot.aspx