Discussion:
SNMP Traps not being logged
jria
2012-09-07 14:04:01 UTC
Permalink
jria [http://community.zenoss.org/people/jria] created the discussion

"SNMP Traps not being logged"

To view the discussion, visit: http://community.zenoss.org/message/68436#68436

--------------------------------------------------------------
I'm currently running Zenoss 4.2.0 and am having problems with SNMP traps not being logged properly.

I have enabled debug mode and can see a trap hit the system through zentrap.
DEBUG zen.zentrap: pre_parse: IPv4 10.25.93.1
DEBUG zen.zentrap: Received packet from 10.25.93.1 at port 61289
DEBUG zen.zentrap: snmp trap vmwEnvIndicationTime.0
DEBUG zen.zentrap: Queued event (total of 1) {'firstTime': 1346960290.424125, 'severity': 3, 'eventClassKey': 'vmwEnvIndicationTime.0', 'oid': '1.3.6.1.4.1.6876.4.30.3.0', 'component': '', 'community': 'public', 'summary': 'snmp trap vmwEnvIndicationTime.0', 'eventGroup': 'trap', 'device': '10.25.93.1', 'lastTime': 1346960290.424125, 'monitor': 'localhost'}
DEBUG zen.zentrap: Sending 1 events, 0 perfevents, 0 heartbeats.
DEBUG zen.zentrap: Events sent

The zenhub log shows the event come in, then adds it to the raw event queue.
DEBUG zen.zenoss.protocols.amqp: Publishing with routing key zenoss.zenevent.unknown to exchange zenoss.zenevents.raw
DEBUG zen.Events: ===============  incoming event  ===============
DEBUG zen.queuepublisher: About to publish this event to the raw event queue:uuid: "971023be-f859-11e1-a48e-005056950077" ... , with this routing key: zenoss.zenevent.unknown
DEBUG zen.zenoss.protocols.amqp: Publishing with routing key zenoss.zenevent.unknown to exchange zenoss.zenevents.raw
DEBUG zen.zenhubworker: Time in sendEvents: 0.14
DEBUG zen.ZenHub: worker 0, work localhost:Products.ZenHub.services.EventService.sendEvents finished in 0.203500032425

However, the event never shows up in the database.  As far as I can tell there are no transforms that would drop these messages.  Does anyone have any ideas where these messages may be hanging up, or where I need to look next?

Thanks
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/68436#68436]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]
jcurry
2012-09-07 15:47:48 UTC
Permalink
jcurry [http://community.zenoss.org/people/jcurry] created the discussion

"Re: SNMP Traps not being logged"

To view the discussion, visit: http://community.zenoss.org/message/68445#68445

--------------------------------------------------------------
Try turn the logging on zeneventd up to debug.  You only want to do this will you are doing problem determination but it does show you how the event gets processed.  I can see my traps going through there.
Cheers,
Jane
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/68445#68445]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]
istoptofly
2013-02-27 18:16:08 UTC
Permalink
istoptofly [http://community.zenoss.org/people/istoptofly] created the discussion

"Re: SNMP Traps not being logged"

To view the discussion, visit: http://community.zenoss.org/message/72207#72207

--------------------------------------------------------------
I'm having the same issue but even with debugging enabled on both zeneventd and zentrap, I don't see the trap.  I DO see the packets hit the interface of the server when doing a tcpdump, it just doesn't seem to make it to Zenoss.

Thoughts?

John

Zenoss 4.2.3 running on 64 bit RHEL 6.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72207#72207]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]
istoptofly
2013-02-27 18:39:10 UTC
Permalink
istoptofly [http://community.zenoss.org/people/istoptofly] created the discussion

"Re: SNMP Traps not being logged"

To view the discussion, visit: http://community.zenoss.org/message/72208#72208

--------------------------------------------------------------
Well, scratch that.  I thought I had taken care of my iptables entries but I missed allowing traps! 

John
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/72208#72208]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]
Loading...