NetXMS Forum

Ok, thank you very much. Now is fine.It worked.  But i have a problem now to compile the mib file.
I will create  a new topic for this problem at the corespondent section of forum. Thanks

Hello,
I tried to install netxms-2.0.1 on Win XP, when it begins to install Microsoft Visual C++ 2005 Redistributable I get the error that it can not find vcredist.msi. I was pointing to the file, I was installing first the VC++ and after that Netxms and the same problem. Another problem is that I can not even uninstall the VC++ from Add Remove Programs.
Any idea about how can I start Netxms?

Yes I tried, but nothing. Please take a look at attachements if you have time and tell me where I'm wrong.

@victor said in SNMP Traps handling:

@calin.sarac said in SNMP Traps handling:

One question please, as long as  I was not able to execute comands or scripts from Actions section in your program could be there any connection with the present situation ?  I tried a simple command like "cmd.exe /C "mplay32"" and even it seems that is fine is not working.I tried to put the same command in a bat file and add that bat file in actions and still not working even if everything is fine (I read all your post on the forum regarding this subject and follow the recomandations).

If you are running NetXMS server as a Windows service, you will not see any GUI for the programs started by the server. If you really wish to see GUI program started by the server, you should turn on "Allow service to interact with desktop" in NetXMS Core service properties. For simple tests, I recommend you to start simple program or bat file which writes something to some file, and check content of that file.

Best regards,
Victor

I turned on "Allow service to interact with desktop" but still no result. I'm missing something but not sure what.
Thanks a lot
Calin

Hi!

As I can see from your config, you extract only one varbind from SNMP trap - with OID .1.3.6.1.4.1.2509.8.21.2.2.1.7. Value of this varbind will become event's parameter number 2, as you can see from column "No." in trap configuration's "Parameter buindings" list. But, in your event configuration and event processing policy you refer to parameter number 3 (by using macro %3 and variable $3 in script), which will always be empty string, because you don't extract anything else from trap. If you change $3 in your script to $2, it should start working.

Also, why you are using syslog parser? Do you receive anything via syslog as well?

Best regards,
Victor

First of all I changed $3 with $2 and it seems that it works.
Now regarding the syslog parser, the situation is like this. In one moment in the past I was not able to get alarm message in Alarm Browser. So as long as I didn't find in the documentation which files ar processed by syslog parser
I suposed that the  syslog parser process the default logs (like SNMP Trap log) and there for I tried to extract from SNMP Trap Log the message that contains string "201" and all that next (this because I observed that all messages contains the yaear 2010 or 2011), and for some reasons I belived that it really works. It is obviously that I was wrong. So now, what files are processed by syslog parser or which is the syntax that indicates the the file processed.
Anyway, problem solved,
Thanks a lot,
Calin

SNMP trap log 2

SNMP_trap_log_2.rar

SNMP trap log

SNMP_trap_log_1.rar

trap config, event policy processor config and syslog parser config

trap_parser_policy_config.rar

Victor,
attached you can find the screen shots that you asked.
One question please, as long as  I was not able to execute comands or scripts from Actions section in your program could be there any connection with the present situation ?  I tried a simple command like "cmd.exe /C "mplay32"" and even it seems that is fine is not working.I tried to put the same command in a bat file and add that bat file in actions and still not working even if everything is fine (I read all your post on the forum regarding this subject and follow the recomandations). Anyway doesn't matter, I was just asking if can be any connection between the present situation and that situation as long as your program should execute/interpret some syntax/command.
Thanks,
Best regards,
Calin

event_config.rar

First time I missed semicolon but I had no error. I tried also with semicolon, had no error but is not filtering.
I also tried someting like:
sub main()
{
if ( $3 match "ALARMA")
return true
else
return false
}
but still no result.
It is correct the place where I put the script?(Event processing policy editor - Script)
I don't have any idea now. What else can I try?
Thanks,
Calin

Hi Victor,
I think that the strange character is the asterisk character that means everything, but I still don't understand the point sign before and after asterisk in syntax form 2.I tried also the sintax 
return $3 like "*ALARMA*"
But still doesn't work.
Thanks,
Looking forward for your help

Hi Victor,
I added in Event Processing Policy Editor in script field both
return $3(because this is the parameter used in sys log praser to send the text contained in the SNMP trap) like "ALARMA"
and
return $3 match "ALARMA"
but it doesn't works. Is it something that maybe I missed? For example you put some strange characters in syntax form 1 before and after string ALARMA and the same characters plus point sign in syntax form 2. Are  these necessary?
Thank you,
Best regards,
Calin

Hello Victor,

1)important traps contain in message text this string "ALARMA" and all others doesn't contain. I don't know which is the error code in SNMP trap or if it is different for different alarms but I can program the radio equipment to put that string in SNMP traps that I'm interested, so we can look for that.
2) If I'm not using an alarm key then I'm flooded with alarms because it seems that all SNMP traps that are coming from equipments are coming with same trap OID .1.3.6.1.4.1.2509.8.21.3.1, so now i'm using macro %i as alarm key and right now it logs alrms from diferent equipments but for the same equipment not (for example I get an important alarm from equipment A and after that I get a non-important alarm from the same equipment A and this last alarm is logged over the first one and I lose the important one). Anyway after I have the filtering script I think that I can use an empty alarm key because then I can filter the alrms using that filter.

Many thakns for your prompt answer,
Best regards
Calin

Hello,
first of all thank you for this software. Now I want to monitor using SNMP some Alcatel 9500 MXC CT radio equipmets.NetXMS is installed on a Win XP machine. As long as I don't have the MIB files for this equipment I did the folowing things:

• create a critical alarm event "ALARMA ECHIPAMENTE"
  -Create a SNMP trap with trap OID .1.3.6.1.4.1.2509.8.21.3.1 with trap parameter binding by object ID.1.3.6.1.4.1.2509.8.21.2.2.1.7 and asign with alarm event "ALARMA ECHIPAMENTE"
• because on this way I catched not only the alarms on the equipment but every message about it(like emission power increase - which is not an alarm - is just a message that tells that the equipment changed the state) I used sys log praser to send the text contained in the message to the alarm browser - so no I can see in alarm browser the message and from there reading this message I can understand if it is a real critical alarm or just a  message that tells you that the equipment changed the state. This is not what I looking for but for the moment it works. I was looking for something that tells me when is a real alarm and when not but  as long as I always get the  same OID I supose that is not possible. Please confirm or advice if I can solve this in another way (I don't know maybe with sys log parser or some external programs that looks in message content).
   Now another problem that I have with the previous working mode is that if an alarm appears after another alarm the second alarm goes in alarm browser over the first one so I can not know abaout the first one even the source is different(for example one alarm is comming from the equipment A and it is alarm. Until I acknowledge this alarm another alarm is comming from equipment B and this let say is just an false critical alarm because it tells the equipment changed the state, but it goes over the first one and I just missed the real critical alarm). So how can solve this?
  If you need any aditional informations log files or anything else just let me know,
  Thank you in advance,
  And best regards,
  Calin