Chris, The fact that your log contains "CleverSoft-Candle-6.6" (instead of a raw OID) indicates that you have already got the appropriate MIB compiled into MIB.TXT/TRAPS.TXT. Thus, the appropriate event should already be listed in your event library. All you then have to do is associate it with the device on the map that will generate the event.
If you want to create the event definition from scratch then the easiest way is to use the Autofill feature - seeing as how you've already got a log entry for the trap that you are interested in. This would involve pasting the log line into the "New SNMP Event" dialog. This autofills the OID and Major/Minor type fields for you. Once this is done there would be no need to bother with a payload check unless there was something else that needed to be tested for. For instance, one could have a trap from an environmental monitor where the payload check could examine the temperature - data which is not part of the OID of the trap. One observation... if you do create payload checks then bear in mind that they use regular expressions. The dot in "CleverSoft-Candle-6.6" is a regex metacharacter that means "any character". So you would also get a match against (say) "CleverSoft-Candle-6a6" Of course, it's not likely that you will get a false match in reality for such a long string. Mark Symons Ipswitch, Inc Augusta GA -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thursday, February 27, 2003 10:58 To: [EMAIL PROTECTED] Subject: RE: [WhatsUp Forum] Pruning Notification from "Annoying" traps Hi, people. Ever since my SNMP traps notifications started failing, I have been unable to successfully get them back in normal working order again. I even did a complete re-install of WUG. At any rate, I want to try capturing SNMP traps by searching for a particular string in the trap message. Here is a test SNMP trap generated on one of our Notes servers. 20020227 103815 EVENT SNMP Trap/Unsolicited 192.168.66.21 Trap(CleverSoft-Candle-6.6) trapString.0="test from adminhub01" trapNumber.0=6 trapServer.0=ADMINHUB01/Keane Addr:192.168.66.21 Int:6 Int:6 Tick:"12 days 08:10:43" So, I go into NEW SNMP TRAP EVENT I give it a display name of CSC6.6 under Payload, I add the string CleverSoft-Candle-6.6 to the MATCH ON box that's with no parentheses or quotation marks........CleverSoft-Candle-6.6 I then add the new SNMP trap event to the device I then add the new SNMP trap event to the device's notification to the Notes pager Question: Should this work, as I've configured it above? Did I select a valid string of chars from the actual SNMP message above? Thanks.......... Chris Powers Systems Engineer MCSE, CNA, Network+, A+ Keane IT Technical Services Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
