OneSight Administrator Guide

Setting Up an Alert to Trigger an Action Plan
SNMP Trap Search – Specifies the text substring pattern to match before
triggering an alert. This field is case-sensitive. If blank, all traps that meet
the basic Enterprise and Trap Type filter criteria in the General tab of the
SNMP Trap monitor trigger the alert. Enter any substring to further
define the alert criteria.
To alert on any trap originating from a particular IP address, enter the IP
address.
SNMP Trap Reset String – Specifies the string that indicates the alert
condition no longer exists and the monitor can return to a Good state.
Enter this field when the device sending the traps sends an ―all clear‖ type
trap when the condition no longer exists. In this case, the Reset time
should be set to its maximum value of 9999 (7 days) to ensure that the
monitor does not return to a good state prematurely.
If the device sends traps at a specified interval as long as the condition
exists, and the absence of such traps indicates that the problem no longer
exists, leave this field blank.
Reset time (minutes) – Specifies how long to wait before returning to a
Good state after an SNMP Trap message triggers an alert. If no additional
SNMP Trap alerts occur for the length of the Reset time, OneSight
returns the SNMP Trap monitor to a Good state.
Setting the reset time to zero causes the trap to reset after zero minutes
have passed, which means the trap alert will never be set.
Note: If you specify both the SNMP Trap Reset String and the Reset
time, whichever occurs first will reset the trap’s state. If you want to
reset only by string, it is recommended that you set the reset time to
9999.
Example SNMP Trap Message
Trap Received:
Enterprise: oneSightTraps
Trap Event Name: oneSightCritical
Object ID:
.iso.org.dod.internet.private.enterprises.empirix.oneSig
442 OneSight Administrator Guide