SNMP Traps Alert
The SNMP Traps Alert page configures alerts for a managed machine, acting as a SNMP trap "listener", when it detects an SNMP trap message.
When SNMP Traps Alert is assigned to a managed machine, a service is started on the managed machine called
Note: Create an event set that includes
Note: SNMP uses the default UDP port 162 for SNMP trap messages. Ensure this port is open if a firewall is enabled.
Because the number of events in Windows events logs is enormous the VSA uses a record type called an event set to filter an alarm condition. Event sets contain one or more conditions. Each condition contains filters for different fields in an event log entry. The fields are source, category, event ID, user, and description. An event log entry has to match all the field filters of a condition to be considered a match. A field with an asterisk character (*) means any string, including a zero string, is considered a match. A match of any one of the conditions in an event set is sufficient to trigger an alert for any machine that event set is applied to. For details on how to configure event sets, see Monitor > Event Log Alerts > Edit Event Sets.
Creating an SNMP Traps Alert
Passing Alert Information to Emails and Procedures
Note: SNMP Traps Alert shares the same Format Email window with Monitor > Event Log Alerts.
Click Apply to apply parameters to selected machine IDs. Confirm the information has been applied correctly in the machine ID list.
Click Clear to remove all parameter settings from selected machine IDs.
If checked and an alarm condition is encountered, a ticket is created.
If checked and an alarm condition is encountered, an agent procedure is run. You must click the select agent procedure link to choose an agent procedure to run. You can optionally direct the agent procedure to run on a specified range of machine IDs by clicking this machine ID link. These specified machine IDs do not have to match the machine ID that encountered the alarm condition.
If checked and an alarm condition is encountered, an email is sent to the specified email addresses.
Select All/Unselect All
Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.
These icons indicate the agent check-in status of each managed machine. Hovering the cursor over a check-in icon displays the agent Quick View window.
Online but waiting for first audit to complete
Agent online and user currently logged on.
Agent online and user currently logged on, but user not active for 10 minutes
Agent is currently offline
Agent has never checked in
Agent is online but remote control has been disabled
The agent has been suspended
Click a row's edit icon to populate header parameters with values from that row. You can edit these values in the header and re-apply them.
The type of event log being monitored.
The ATSE response code assigned to machine IDs or SNMP devices:
The event category being monitored.
A comma separated list of email addresses where notifications are sent.
The number of times an event occurs within a specified number of periods. Applies only if the Alert when this event occurs <N> times within <N> <periods> option is selected. Displays
The number of periods and event must occur to trigger an alert. Applies only if the Alert when this event occurs <N> times within <N> <periods> or Alert when this event doesn't occur within <N> <periods> options are selected.
Displays the number of periods to wait before triggering any new alerts for the same combination of event set and event category. Applies only if a re-arm period greater than zero is specified using Ignore additional alarms for <N> <periods>.