Hi,

I receive traps with several parameters each one that i translate with
snmptt in a log like this:

<"father" OID>.1.1.1.1.1 1
<"father" OID>.1.1.1.2.1 "default_organization"
<"father" OID>.1.1.1.1.2 2
<"father" OID>.1.1.1.2.2 "default_channel"
<"father" OID>.1.1.1.1.3 3
<"father" OID>.1.1.1.2.3 "666111222"
<"father" OID>.1.1.1.1.4 4
<"father" OID>.1.1.1.2.4 "GPRS"
<"father" OID>.1.1.1.1.5 5
<"father" OID>.1.1.1.2.5 "87.172.15.19"
<"father" OID>.1.1.1.1.6 6
...and 20 parameters more

and i want to correlate them to show the first ocurrence and if its a change
(i mean the data between quotes) in the next coming traps from the same
device in a time window of 5 minutes, refresh the data of that parameter of
that single trap to send it back to the log (guess by trap back to snmptt).
That´s the point where i am now. Well, i´m working with these rules an i´d
like your opinion:


type=SingleWithSuppress
continue=takenext
ptype=regexp
pattern=.1.3.6.1.*
context=!STORE
desc=create context STORE
action=create STORE; set STORE 300 \

type=single
continue=takenext
ptype=regexp
pattern=.1.3.6.1.*
context=STORE
desc=add event to STORE
action=add STORE $1

Well, of course it´s incomplete so i need some help.


Thank you all very much!!
------------------------------------------------------------------------------

_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to