Change Actions Based on the Trap Values

When the monitored device sends a trap, it puts various information into the trap and sends it. Depending on the content, you may not want to detect it as a failure. ThirdEye allows you to filter by specifying conditions.

The example below uses Syslog traps from Cisco equipment to filter traps.

  1. In the [Inventory] main tab, doubleclick the target device.

The device’s Editor will open at the bottom of the screen.

  1. Click the button in the left sidepanel of the Editor to open the options menu.

  2. Click [SNMP Trap] to add an SNMP trap monitor to the device.

  1. Enter a message for when a failure occurs.

The following shows clogHistMsgText (message content) included in the trap.

  1. Click [Trigger], then click [Raise Trigger Alert].

  1. Check the box next to “Conditional” and enter your Trigger Alert conditions.

In the above example, if clogHistSeverity is severity “error” or higher (“emergency”, “alert”, “critical”), and the value of clogHistMsgText does not include LogicVein, the alert will be targeted.

  1. Set the policy and severity.

  1. Click [Save].