KBI 311421 Events For SNMP Trap Message Are Always Fired By Default
Version
Argent Advanced Technology All Versions
Date
Tuesday, 21 June 2016
Summary
Events for SNMP Trap Message are always by default even the SNMP Trap Rule option ‘Post Event Even If Same Event Is Still Outstanding is unchecked
The logic behind this is that processing of SNMP trap message is Event-driven
The trap message is usually fired by device only when condition is changed
Argent AT Engine treats each SNMP trap message is unique even its content might be the same as some messages fired earlier
The default behavior can be changed in two ways:
-
Change registry HKLM\Software\Argent\ARGENT_FOR_SNMP\TRAP_SAME_SECONDS_THRESHOLD
The default value is 5
The Engine will discard the SNMP trap message if the same machine was fired within the time range
So, by default, if a same message is fired within 5 seconds, no Event is to be fired
- Change registry HKLM\Software\Argent\ARGENT_FOR_SNMP\ALWAYS_NOTIFY_TRAP_MESSAGE
The default value is 1 (TRUE)
This corresponds to the default behavior of trap message processing
If the registry is changed to 0 (FALSE), the option ‘Post Event Even If Same Event Is Still Outstanding’ controls whether the Event should be fired, just like typical Argent AT Rules
Technical Background
N/A
Resolution
N/A