SNMP trap processing at Mid Server through a script

[Lingesh2]

Hello, 

We are attempting to use a MID server to process SNMP traps to the Event Management modules' em_event table, however it does not yet fully support automatic varbinds mapping to event fields. So, we had the idea to create a script that would analyze the SNMP traps and map them to the proper fields. We are unsure of where to put these scripts. Any help or suggestions on how to use a script to parse the traps into events (pre-event processing) would be greatly appreciated.

[Rahul Priyadars]

May i have more details ur requirement for -- not yet fully support automatic varbinds mapping to event fields 

Please?

See if this post gives you any input for ur issue - 

https://www.servicenow.com/community/developer-forum/event-management-snmp-traps-generating-events-b...

writing any BR or script on em_event table is not a good practice.

https://www.servicenow.com/community/itom-forum/can-we-apply-business-rules-on-event-table-em-event/...

Regards

RP

[Lingesh2]

Thank you, Rahul for your swift reply. 

We have been attempting to use the event field mapping method, we are aware that SNMP trap Var binds cannot be directly mapped with event fields. However, we soon learned that it is not the best solution because the majority of our event sources are sophisticated and SNMP-based and will make too many field mapping and event rules for alert transformation. Thus, the idea to write a script to handle the mapping to event fields. If we use these scripts, where should they be kept and how should they be executed? We're seeking for any other alternatives to business rules that might be used to execute these scripts for pre-event processing.

[Rahul Priyadars]

Just a thought-did u explored data coming to ecc queue table . There must be entries for all these traps in ecc queue.

https://www.servicenow.com/community/itom-forum/what-happens-to-snmp-traps-if-the-mid-server-cannot-...

Regards

RP