All work

Select view

Select search mode

 

clog messages not generating alarms (uei.opennms.org/vendor/Cisco/traps/clogMessageGenerated)

Description

Hi,

snmp traps configured on cisco devices like this:

Do not trigger alarms, nor events.

 

 

Acceptance / Success Criteria

None

Lucidchart Diagrams

Details

Assignee

Reporter

HB Grooming Date

HB Backlog Status

Doc Backlog Status

Doc Backlog Grooming Date

Components

Priority

PagerDuty

Created September 30, 2020 at 11:36 AM
Updated June 11, 2021 at 7:12 PM

Activity

David HustaceOctober 13, 2020 at 7:03 PM

This is not a bug.  This can be handled in configuration.  I would check the videos and documentation around event configuration.  Feel free to reach out to the OpenNMS group if you need assistance with this configuration.

Héctor SánchezSeptember 30, 2020 at 11:49 AM

I pasted the wrong line on my previous comment: "uei 'uei.opennms.org/vendor/Cisco/traps/tcpConnectionClose' marked as 'donotpersist'; not processing"
2020-09-30 11:17:13,296 DEBUG [AggregatorFlush-Trap] o.o.n.e.p.HibernateEventWriter: HibernateEventWriter: uei 'uei.opennms.org/vendor/Cisco/traps/clogMessageDiscarded' marked as 'donotpersist'; not processi
ng event.
 

Héctor SánchezSeptember 30, 2020 at 11:45 AM

Removing "maskelement" on clogMessageDiscarded event at events/Cisco.events.xml ( ) makes all syslog traps being matched as clogMessageDiscarded, instead of clogMessageGenerated*, thus making them ignored: "uei 'uei.opennms.org/vendor/Cisco/traps/tcpConnectionClose' marked as 'donotpersist'; not processing"

Looks like clogMessageDiscarded is a clon of clogMessageGenerated, probably added to filter out some log messages and added upstream by mistake, the label is also wrong as is a duplicate of clogMessageGenerated.

Adding a varbind to clogMessageDiscarded or removing that event makes it work; I was unable to do so via gui (Cant save the changes: Commit failed"  error )so I updated the event file and triggered a config reload.

Héctor SánchezSeptember 30, 2020 at 11:38 AM

eventd debug logs: