Traps and events

[lindeamon]

i have checked it and i was right.
when you open an event you have a checkbox for writing the event to the log

[Nikk]

Heh, such a stupid mistake! Yes,  just had to restart

Okay, back to problem, know I see that i'm getting a lot of traps, for that one fail login! What is the reason for this?
I checked tcpdump and there i didn't see anything from that exact address on which i tried to connect.

Thank you for response!

Nikk

[lindeamon]

have you configured only one device to send netxms traps ?
the only thing that i can think of now is that an snmp auth. trap gets sent from every device including windows with snmp support and maybe this is your problem.

can you post the snmp log ?

[Nikk]

I configured on 2 Enterasys switches D2 and N1 to send me traps.
 In SNMP Trap monitor the traps i'm receiving are from my IP.

[lindeamon]

what is your platform ?
is snmp configured on it ?
did you configured correct snmp community in the node properties of your ip ? global snmp community on the netxms server ?
maybe netxms is trying to connect to your computer via snmp with the wrong community or maybe your computer is configured to allow snmp only from local host and that is what causing the traps.

[Nikk]

Netxms server is on Ubuntu server 12.04, and i'm working on agent (win7).
When I changed snmp settings on win7 (receice traps from any host), i get only one trap now! But I receive it as SNMP_UNMATCHED_TRAP not like SNMP_AUTH_TRAP anymore. what could be the cause of this?

Thanks in advance,
Nikk

[lindeamon]

let me see if i understand.
you installed an agent on a windows 7 platform, and on the server you get SNMP_UNMATCHED_TRAP originated from the windows 7 platform, am i right ?
if this is the case, then you can google the oid of the trap to see who or what generated it, maybe a software is configured to send snmp like the snmp agent of the broadcom management suite for servers.

if this is not the case then try to find out where the trap is originated from, lookup the oid and we will go from there.
from your answer i see that at least you solved the multiple events that you got.

Regards,
Lindeamon

[Nikk]

yes, exactly! Sorry, if I am telling something wrong!

The oid is  .1.3.6.1.4.1.5624.1.2.49.1.0.1 , it's a enterasys oid from ENTERASYS-MIB-NAMES
etsysResourceCpuLoad1minThresholdExceeded, so I just need to make an event named like that and that's all?

I have successfully (i think)  added all enterasys mibs.

Yes, for a while everything was quiet! But when i changed some snmp service settings, i'm receiving that spam again! My computer is generating them, as i take out netxms server form my snmp service, it's fine again.

Hope you understand!

Thanks in advance,
Nikk

[lindeamon]

for the 1st part yes, you have to make a new event. you can see here https://www.netxms.org/forum/general-support/sharing-standard-templates-for-netxms/ all my posts and maybe it will help you understand how to configure netxms.

for the 2nd part, since the node configuration of your computer in netxms includes snmp it tries to query your computer every 30 seconds or so and my be it has the wrong community configured in the node properties, check that and maybe this is your solution.

Regards,
Lindeamon

[Nikk]

Thank you, i think i get that trap&event thing

That's not the case i guess, as my community name is public!

Thanks in advance,
Nikk