<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.emailquote, li.emailquote, div.emailquote
{mso-style-name:emailquote;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:1.0pt;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:601499892;
mso-list-template-ids:-2061612134;}
@list l1
{mso-list-id:1306275767;
mso-list-template-ids:1788487240;}
@list l1:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>1 – clearing the trap.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Unfortunately, the only way the SNMP trap status changes on
Xymon is when it receives a new SNMP trap from the device. If the device
would send an “all clear” type of trap when it was happy, that’d
change the status back to green. If there’s a way to create an
event on the device that generates a “Normal” event, you could use
that as a mechanism to change the SNMP status on Xymon. (Example,
if saving the configuration generates a “Normal” SNMP trap….)
Ugly, but it’d work.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The other way to address it would be to come up with a way to
manually acknowledge or clear a trap similar to the alert acknowledgment in
Xymon. I’ve never had time to pursue that.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2 – origination of the trap<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The only way I can think of addressing this is if each database
server can be configured to send SNMP traps on their own. The SNMPTRAPD
daemon uses the sending device’s hostname and that’s what is used
to send to Xymon.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hope this helps,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Andy<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Nicole Beck
[mailto:nskyrca@syr.edu] <br>
<b>Sent:</b> Friday, October 15, 2010 9:42 AM<br>
<b>To:</b> 'xymon@xymon.com'<br>
<b>Subject:</b> [xymon] help setting up SNMP traps to Xymon<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Hello,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>I’m
running Xymon 4.2.3 on RHEL 5.4 and I’m trying to setup Xymon to receive
SNMP traps from our Oracle database servers. We are also
running Oracle Enterprise Manager on another server (we call it the “grid”)
that monitors the Oracle database servers too, but our DBA’s want to use
Xymon to alert them of Oracle problems instead of the grid server so they
don’t get alerts from two different places. The DBA’s
manage OEM(therefore I’m not familiar with it), and have configured it to
recieve SNMP traps and send them to Xymon.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>I
configured the Xymon server to receive traps using the documentation at <a
href="http://cerebro.victoriacollege.edu/hobbit-trap.html">http://cerebro.victoriacollege.edu/hobbit-trap.html</a>.
We do receive traps, but there are two problems: <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<ol start=1 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>The
trap status diamond does not change color when it gets a trap or when the
trap clears. My understanding is that this is set in the Oracle MIBS
that are translated to the /etc/snmp/snmptt.conf.oracle file.
I’m not sure how to change the file to get it to give different
alerts. If I change the word “NORMAL” in the following
line to “SEVERE” the trap status will go red, but will not
return to green when the trap clears. Any suggestions on how to fix this?<o:p></o:p></span></li>
</ol>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>EVENT
oraEM4Alert .1.3.6.1.4.1.111.15.2.0.1 "Status Events" Normal<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<ol start=2 type=1>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l1 level1 lfo2'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>The
traps status changes for the grid server instead of the database server
with the problem. Drilling down into the “trap” status,
you will see an error for the database server though. The
snmptrapd.log and snmptt.log files (examples below) show the traps coming
from the grid server. Does anyone know how to get the traps to
appear under the database server name rather than the grid server?<o:p></o:p></span></li>
</ol>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Example
snmptrapd.log entry (host name changed):<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>2010-10-14
19:04:49 grid-server [xxx.xxx.xxx.xxx] (via UDP: [xxx.xxx.xxx.xxx]:51617) TRAP,
SNMP v1, community public<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>
.1.3.6.1.4.1.111.15.2 Enterprise Specific Trap (1) Uptime: 0:06:31.00<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>
.1.3.6.1.4.1.111.15.1.1.1.2.1 = STRING: "DB00157.world"
.1.3.6.1.4.1.111.15.1.1.1.3.1 = STRING: "Database
Instance" .1.3.6.1.4.1.111.15.1.1.1.4.1 = STRING:
"database-server " .1.3.6.1.4.1.111.15.1.1.1.5.1 =
STRING: "Status".1.3.6.1.4.1.111.15.1.1.1.6.1 =
"" .1.3.6.1.4.1.111.15.1.1.1.7.1 =
"" .1.3.6.1.4.1.111.15.1.1.1.8.1 = STRING:
"Oct 14, 2010 7:04:00 PM EDT"
.1.3.6.1.4.1.111.15.1.1.1.9.1 = STRING:
"Critical"
.1.3.6.1.4.1.111.15.1.1.1.10.1 = STRING: "Failed to connect to database
instance: ORA-01033: ORACLE initialization or shutdown in progress (DBD ERROR:
OCISessionBegin)."
.1.3.6.1.4.1.111.15.1.1.1.11.1 = STRING: "Test SNMP database-server DB
Down " .1.3.6.1.4.1.111.15.1.1.1.12.1
= STRING: "SYSMAN"
.1.3.6.1.4.1.111.15.1.1.1.13.1 = STRING: "0"
.1.3.6.1.4.1.111.15.1.1.1.14.1 = ""
.1.3.6.1.4.1.111.15.1.1.1.15.1 = STRING:
"923A730174F36B87E040E6801417642D"
.1.3.6.1.4.1.111.15.1.1.1.16.1 = STRING: "0"
.1.3.6.1.4.1.111.15.1.1.1.17.1 = ""
.1.3.6.1.4.1.111.15.1.1.1.18.1 = STRING: "0"
.1.3.6.1.4.1.111.15.1.1.1.19.1 = ""
.1.3.6.1.4.1.111.15.1.1.1.20.1 = STRING: "1"
.1.3.6.1.4.1.111.15.1.1.1.21.1 = STRING: "923A421065A8A060E040E68015173993"<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Example
snmptt.log entry:<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Oct
14 19:04:52 xymon-server snmptt[0]: .1.3.6.1.4.1.111.15.2.0.1 SEVERE
"Status Events" grid-server - The variables included in the
oraEM4Alert trap. DB00157.world Database Instance database-server
Status Oct 14, 2010 7:04:00 PM EDT Critical Failed to connect to
database instance: ORA-01033: ORACLE initialization or shutdown in progress
(DBD ERROR: OCISessionBegin). Test SNMP database-server DB Down SYSMAN
0 923A730174F36B87E040E6801417642D 0 0 1
923A421065A8A060E040E68015173993<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Thanks
in advance for any help. I’m sorry for the lengthy question.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'>Nicole
Beck<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p>
</div>
</div>
</body>
</html>