SNMP Trap: Health Emails

A trap is generated if health email send fail to be generated.

Identification

  • The originating IP / hostname is used to identify the system generating the traps
  • The NMS is responsible for associating traps with each managed system, along with clearing of alarms and escalation to the relevant system operator
  • The trap OID is generic for various SNMP events monitored by the system
  • The SNMP system name is included as part of the variable binding to assist identification:
.iso.org.dod.internet.mgmt.mib-2.system.sysName.0 = standalone

Trap OID

.iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotifications.mteTriggerFired

Variable Bindings

  • .iso.org.dod.internet.mgmt.mib-2.system.sysUpTime.0 = 2 minutes (12065)
  • snmpTrapOID = mteTriggerFired
  • .iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotificationObjects.mteHotTrigger.0 = ‘ERROR: Trouble sending health email’
  • .iso.org.dod.internet.mgmt.mib-2.dismanEventMIB.dismanEventMIBNotificationPrefix. dismanEventMIBNotificationObjects.mteHotValue.0 = 1
  • .iso.org.dod.internet.mgmt.mib-2.system.sysName.0 = standalone

Severity Messages:

  • Info : INFO: Health emails is now being sent, INFO: All notify levels is now configured with an external email address
  • Minor : ERROR: Trouble sending health email, WARNING: Not all notify levels is configured with an external email address

Example: ERROR: Trouble sending health email

Notification message from (1, 3, 6, 1, 6, 1, 1):('192.22.21.124', 44151):
Var-binds:
1.3.6.1.2.1.1.3.0 = 58347940
1.3.6.1.6.3.1.1.4.1.0 = 1.3.6.1.2.1.88.2.0.1
1.3.6.1.2.1.88.2.1.1.0 = ERROR: Trouble sending health email
1.3.6.1.2.1.88.2.1.3.0 = Trouble sending health email
1.3.6.1.2.1.88.2.1.5.0 = 1
1.3.6.1.2.1.1.5.0 = UN1-192.22.21.124

Example: WARNING: Some notify levels are configured with a local email address

Notification message from (1, 3, 6, 1, 6, 1, 1):('192.29.22.122', 25067):
Var-binds:
1.3.6.1.2.1.1.3.0 = 7420086
1.3.6.1.6.3.1.1.4.1.0 = 1.3.6.1.2.1.88.2.0.1
1.3.6.1.2.1.88.2.1.1.0 = WARNING:  Some notify levels are configured with a local email address
1.3.6.1.2.1.88.2.1.3.0 = Notify list:
    notifications:
    emailrelay: 172.29.42.30
    level:
    audit:
    snmp://rrako@192.29.21.225
    error:
    mailto:xlatform@loc  Message is truncated
1.3.6.1.2.1.88.2.1.5.0 = 1
1.3.6.1.2.1.1.5.0 = UN1-192.29.22.122

Resolution:

Ensure that all notifications are non-local.