I setup a SNMP trap and I am collecting data but it is not triggering notifications. I have a filter for 18.104.22.168.4.1.30586.14.99 and an error filter of bindings[22.214.171.124.4.1.30586.14.99,0] so that it triggers on value=0 but I do not get notifications. How can I get the content of the SNMP trap to trigger a notifications if not by the filters? This trap is a binary value that I want to alert on an OFF or 0 result. Here is the exact filter as given from the filter text from within PRTG: (bindings[SNMPv2-SMI::enterprises.30586.14.99] OR bindings[=] OR bindings) I have a second trap that is set to error on bindings[126.96.36.199.4.1.30586.14.75,0] and it does not trigger notifications either. I want to be alerted when the trap content is '0'. What am I doing wrong? Thanks
The notification system of a PRTG trap sensor does not react to individual traps, instead the bandwidth of the particular traps (all messages, errors, warnings) since the last sensor scan is used.
You can use the include filter of the sensor to only evaluate the according traps.
The trap sensor has several channels. You can use those to trigger a notification if the number of traps per second exceeds a given value. If you want to change the sensor status as well, please edit the according channel limits and use a state trigger. Otherwise please add a speed trigger.
So I set the error filter to filter on a particular trap and had it set to down the sensor if there was an error. Shouldn't this generate a notification?
It should - could you post your error filter and the actual message you expect PRTG to notify on?
So it set to error on this:
and this is set:
When a Sensor Reports an Error: Set sensor to "down" immediately
but it never goes down.
I put the same thing in Warning and I get warnings which is a fine work around.
I was expecting to have it see the trap message above and report it as an error and down the sensor triggering a notification based on the down state here:
When sensor state is Down for at least 0 seconds perform Email me
I tried 1 second and 5 seconds with no change.
Again the Warning part of it works fine.
In the same vein what does the scan interval mean for the traps receiver? It is collecting traps every 10seconds but doesn't alert on them. Does the scan interval in the trap receiver mean something different than in the typical SNMP sensor?
Could you try using this rule:
Does that work?
No change. The warning works with no parans and I tried a few different ways of entering filter data.
How does this sensor scan interval work for the receiver sensor? I wonder if it is missing the error (although it is shown in the traps) and not being triggered. Is it scanning the receiver results only on that preset schedule?
It's not missing it, it works with the push principle. As soon as a message arrives that applies to the filter, it will alert accordingly. What other filters do you have applied?
Well I had only the error filter on but it wasn't working so I added it to warning where it was working. I have it in both places now. Just the single filter applied to the single device.
Warning Filter: bindings[SNMPv2-SMI::enterprises.30586.14.75,0]
Error Filter: bindings[SNMPv2-SMI::enterprises.30586.14.75,0]
I want to alert on a value of 0.
You don't need to put the binding in both warning and error. Could you try triggering some messages with snmptrapgen (http://scug.be/christopher/2012/09/) to see if the alert gets triggered? Note that the error will only persist for one interval. The sensor will be reset to up after every scan (that is if no further errors are received).