Does ServiceNow truncates any events coming from MID SNMP Trap Listener?

[Ganeshm1]

Hi All

We are receiving events from one source via MID SNMP Trap Listener method. 
Here we configured listener record with SNMP version and port number. 

The event source team is telling, ServiceNow is not receiving complete payload as we are sending.
I just want to understand ServiceNow will truncate any payload value while bringing the event records?
Is there any way how we can check the logs to identify this?
Kindly provide your inputs on this. Thank You!

Regards,
Ganesh

[Aneesh-D]

Dear @Ganeshm1 - I dont think truncate anything.

SNMP trap is again a set of OIDs. If there is any reason why you are not getting the complete message, then i think it might be due to missing MIB files (though not really sure).

Here is how you can troubleshoot this issue:

1) enable debug on mid server by adding the below property in config.xml file:

  <parameter name="mid.log.level" value="debug"/>

2) enable snmp logging: add the below line in wrapper-override file in agent/conf folder

wrapper.java.additional.201=-Dsnmp4j.LogFactory=com.service_now.mid.extension.trap.Snmp4j2DiscoLogFactory

3) then restart the mid server.

after that manually trigger a SNMP trap. You should see logs with what is received.

just to brief you on what this means.. 

line# 16629 is the OID for time.

line# 16630 is the OID for message

line#16631 is the OID for Node (this is a loadbalancer snmp trap, so it has pool and nodes)

line#16632 is the OID for port

last one is for the notification type. So when this get converted too Events, this is how it will look.

 let me know if you need any further help.

Thanks,

Aneesh D

[AmarendraA]

We exactly have same issue. We can see a trap with lot of pairs of OIDs with some value in MID logs. But in corresponding Event record, only a couple of pairs reach. So still looking for a solution...