agent traps

Started by lindeamon, September 01, 2011, 04:12:52 PM

Previous topic - Next topic

lindeamon

hi,

can anyone tell me what kind of traps does the agent send ?
when i create a parser file to check something in the eventlog and this rule is triggered,does the agent send a trap ? or it waits for the server to pull this ?

lindeamon

Victor Kirhenshtein

Hi!

Agent can send events to server. When you define matching rule in parser file, you can specify what event to send using <event> tag. You should specify NetXMS event code. For example, if you create new event, and it was assigned code 100003, you must add <event>100003</event> to your matching rule to send this event to server when matching line found. On server side, those events can be processed as usual in event processing policy.

Best regards,
Victor

lindeamon

hi victor,

so what you are telling me is that a trap gets sent everytime a rule is checked and matched and has an event tag ?
the reason i am asking is that i understood this before but for some reason i have checked an agent and i expected to a large number of traps but instead i saw only 2 traps,why is that ?
if i reset the agent,does it reset the data ? also when i define perfmon counters where does it stores the data ? does it sent it to the server every check ? in case of loosing communication to the server,does it stores the data and send upon comm. restored ?

best regards,
lindeamon

Victor Kirhenshtein

Hi!

Sorry, I don't fully understand question part about perfmon counters and they data. To clarify things: there are two types of communication between server and agent - polls and traps. For data (i.e. DCI defined on the node) server uses polling. For async events - like new event log record - agent generates traps. So, performance data is lost when there are no connection between server and agent (which is not very good, and I'm thinking of adding something similar to HP Operations policies to enable agents to collect data without connection with server - but for now it is as it is). Traps, however, are kept in memory until communication with the server is restored - so, if agent was not restarted, it will send all pending traps as soon as server reconnects.

Best regards,
Victor

lindeamon

thank you victor,

i understand it now.

Best Regards,
Lindeamon