KBI 311421 Events For SNMP Trap Message Are Always Fired By Default

Version

Argent Advanced Technology All Versions

Date

Tuesday, 21 June 2016

Summary

Events for SNMP Trap Message are always by default even the SNMP Trap Rule option ‘Post Event Even If Same Event Is Still Outstanding is unchecked

The logic behind this is that processing of SNMP trap message is Event-driven

The trap message is usually fired by device only when condition is changed

Argent AT Engine treats each SNMP trap message is unique even its content might be the same as some messages fired earlier

The default behavior can be changed in two ways:

  1. Change registry HKLM\Software\Argent\ARGENT_FOR_SNMP\TRAP_SAME_SECONDS_THRESHOLD

    The default value is 5

    The Engine will discard the SNMP trap message if the same machine was fired within the time range

    So, by default, if a same message is fired within 5 seconds, no Event is to be fired

  2. Change registry HKLM\Software\Argent\ARGENT_FOR_SNMP\ALWAYS_NOTIFY_TRAP_MESSAGE

    The default value is 1 (TRUE)

    This corresponds to the default behavior of trap message processing

    If the registry is changed to 0 (FALSE), the option ‘Post Event Even If Same Event Is Still Outstanding’ controls whether the Event should be fired, just like typical Argent AT Rules

Technical Background

N/A

Resolution

N/A