Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > User Device Tracker (UDT) > UDT Administrator Guide > Monitoring SNMP traps > Configure Trap Viewer filters and alerts

Configure Trap Viewer filters and alerts

Table of contents
No headers
Created by Steven Bansil_ret, last modified by Steven Bansil_ret on Feb 01, 2017

Views: 23 Votes: 0 Revisions: 2

The Trap Viewer can be configured to trigger SolarWinds NPM alert actions when received trap messages match defined rules. The following steps establish rules to filter trap messages and initiate alert actions as you determine.

  • With the exception of the asterisk (*) wildcard, SolarWinds recommends against using non-alphanumeric characters in filter definitions.
  • Trap rules are not applied to unmanaged nodes. For more information, see Set device management states.
  1. Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Trap Viewer.
  2. Click File > Settings, and then click the Alerts / Filter Rules tab.
  3. If you are creating a new rule, click Add Rule.
  4. If you are editing an existing rule, click Edit Rule.
  5. Click the General tab,
  6. Enter a Rule Name, and then check Enabled to enable the rule.
  7. Select appropriate servers from the Apply this Rule to list.
  8. Enter the IP addresses or subnets to which this rule applies.

    Use the examples listed on this tab to format the list properly.

  9. If you want the rule limited to messages from specific hosts, domains, or host name patterns, click DNS host name, and then enter a DNS host name Pattern.

    • The DNS host name Pattern rule is case-sensitive.
    • When Use Regular Expressions in this Rule is checked, regular expressions can be used in place of "like" statements. For more information about using regular expressions in SolarWinds UDT, see Regular expression pattern matching.
  10. If you want the rule limited on the basis of content within the Trap Details field, click Trap Details, and then enter a Trap Details Pattern.

  11. If you want the rule limited to specific community strings, click Community String, and then enter appropriate patterns in the Community String Pattern field.

  12. Click Conditions, and then generate trigger conditions for rule application in the text field as follows:
    • Select appropriate object identifiers and comparison functions from the linked context menus.
    • Click Browse (...) to Insert an "OR" condition, to Insert an "AND" condition, or to Delete a condition as necessary.

      For more information about conditions and condition groups, see Understand condition groups.

  13. If you want to limit rule application to within a specific period of time, click Time of Day, check Enable Time of Day checking, enter the time period, and then select days of the week on which to apply the rule.

  14. If you want to suppress alert actions until a specified number of traps arrive that match the rule, click Trigger Threshold, check Define a Trigger Threshold for this Rule, and then enter option values as appropriate.

    When Suspend further Alert Actions for is checked, alert actions are not sent until the specified amount of time has expired. Once the time period has expired, only new alerts are sent. All alerts that are suppressed during the time period will not be sent.

  15. Click Alert Actions.
  16. >If you are associating a new action to the rule, click Add New Action, and then select an action from the list to configure. For more information about adding alert actions, see Add alert actions.
  17. If you are editing an existing action for the rule, select an action from the list, click Edit Action, and then configure the action.
  18. Use the arrow buttons to set the order in which actions are performed.

    Actions are processed in the order they appear, from top to bottom.

  19. If you need to delete an action, select the action, and then click Delete Action.
  20. Click OK to save all changes and return to Trap Viewer Settings.
  21. Use the arrow buttons to arrange the order in which the rules are applied.

    Rules are processed in the order they appear, from top to bottom.

 
Last modified
22:49, 31 Jan 2017

Tags

Classifications

Public