What happens to SNMP Traps if the MID Server cannot connect to the ServiceNow Instance?

[duanew]

We receive SNMP Traps at the MID Server which are then forwarded to the Instance as Events. What happens if the MID Server connection to the Instance is down?

Does the MID Server "store and forward" the traps?

[Narayan2 · Accepted solution]

Hi,

Mid server does not store data so when ever there is no connection between Service now instance and mid server the data will be lost. Essentially the collected data isn't really stored locally other than in logfiles

Below is the process how Mid server works:

   - Every 15 seconds, the MID Server checks the ECC queue for jobs that are assigned to it.
   -If a job exists in the ECC Queue for that MID Server , the MID Server sets the status to "I'm working on it"
   - Does the work that is requested.
   - Reports the findings of the job back to the ECC queue.

Please, mark correct or useful if I helped you

Warm Regards,

Narayan Munagala

Engineer

Board Line +91-20-6728-5000  | Direct +91-20-6728-5147 | Mobile +91-9158467666

|www.DxSherpa.com|

[ori2]

It's partially true, there is a retry mechanism of the mid, only if there is a timeout the events will be lost, otherwise it will retry to send the events. (the mid send the events in bulks, so the retry is on the bulk...)

[robertgeen]

I would open a ticket with HI to ask them as a lot assumptions are being made here. For example the trap mechanism that accepts the trap is an extension on top of the MID server and as such has separate functionality. Further to this I am not 100% clear if it goes through the ECC Queue because most of the documentation shows it translating the TRAP and directly inserting it into the em table on the instance (via an API call).

I would imagine the Trap extension is actually pretty dumb and basic and probably doesn't store and forward but open a ticket with HI to get the answer (or better yet do a quick test as it should be easy enough to test). 

[ori2]

Hey Robert,

I'm from Event Management Dev team, please be aware that my answer is not based on assumptions 🙂 

(docs: https://docs.servicenow.com/bundle/kingston-it-operations-management/page/product/event-management/task/send-events-via-web-service.html)

The TRAP that are sent are stored on a in memory queue directly (Not to the ECC queue) , from this queue those traps are sent to the instance by bulks. The limitations on the mid queue are the size (configurable) or if the mid server powered off.