Event Management: SNMP Traps Generating Events But With Errors.

thisisauniqueus · ‎03-05-2018

Hi,

I am trying to configure SNMP traps with Servicenow. So far i have successfully installed the mid-server and event management module. Events are being generated by mid-server but the problem is their state is always set to Error. Please refer to the attachment below

How can i test/debug the SNMP traps? Any suggestions?

Regards

Patrick DeCarl1 · ‎03-05-2018

Field Mapping is not setup OOTB for all source. If you created a new source you must setup the field mapping for the data you are sending over via snmp to match the fields and values within SN.

So your error is around severity field and the data you sending over does not match. To prove this issue, I went ahead and deleted my mapping and I got the same error below.

Now, for this example, the data coming over from trap is above in the additional information field. You will see eventType value. We want to map this value to severity and have a mapped value for value 1.

Below is a field mapping for eventType to severity. See all the values I have for the required fields.

Once I made the mapping, I reran the same trap and it process through and I have an alert now.

Alert record, with severity = Critical Label value with value of 1.

I hope this helps. If it does, please make sure to make answer correct.

View solution in original post

thisisauniqueus · ‎03-06-2018

Hi Patrick,

Is there any way i can test the SNMP traps? some utility that you know of for generating pseudo snmp traps maybe...

Regards

thisisauniqueus · ‎03-11-2018

Hi Patrick,

please refer to the screenshot below:

i am getting event type in a wired format, any suggestions to convert them to human readable form?

Regards.

Vishal Khandve · ‎03-05-2018

IP tables in the mid-server were not forwarding the udp traffic by default.

Hence traps were not sent to the mid-server application

hydergani · ‎03-05-2018

HI ,

Add event Mapping rule for severity field.

Thanks,

Hyder

sahithya · ‎03-23-2018

I have created a SNMP trap collector to get the events from a portal. I want to get the source as "ABC" in events but it is getting as "Trap From Enterprise 9" is there is any way that I can set this to "ABC " in ServiceNow?