topic Re: Send SNMP trap to other systems in Getting Data In

Send SNMP trap to other systems

mznikkip — Wed, 18 Apr 2012 14:03:58 GMT

I've read the documentation on how to send SNMP traps to other systems, however, I'm confused. How does traphosts.pl know to run sendsnmptrap.pl? I have the IP addresses for my trap receivers but not sure which parameters to change in sendsnmptrap.pl.

Re: Send SNMP trap to other systems

briang67 — Wed, 18 Apr 2012 15:31:20 GMT

We use the trap script extensively at my company for alerting purposes. With our setup we call a shell script from the saved search called sendtrap.sh - that calls a customized version of the perl script sendsnmptrap.pl. The script passes the parameters needed for the perl script.

The shell script looks like this:

 #!/bin/sh
cd /opt/splunk/bin/scripts
$(./sendtrapv15.pl "$1" "$2" "$3" "$4" "$5" "$6" "$7" "$8")

Re: Send SNMP trap to other systems

briang67 — Wed, 18 Apr 2012 15:33:27 GMT

In the sendsnmptrap.pl you'll want to change the $hostPortSNMP wiith the IP and port of your trap receiver.

Re: Send SNMP trap to other systems

mznikkip — Wed, 18 Apr 2012 15:36:21 GMT

Is there a way to send to two different trap receivers? Or would I have to create another sendsnmptrap.pl?
Also, how do I test to make sure it's working?

Re: Send SNMP trap to other systems

briang67 — Wed, 18 Apr 2012 15:52:43 GMT

You can set a second variable like #hostPortSNMP2 and just run the $cmd a second time substituting the new variable

Re: Send SNMP trap to other systems

briang67 — Wed, 18 Apr 2012 15:56:01 GMT

One way to test would be to just run a tcpdump or snoop on the receiving host to see if the trap was received.

Re: Send SNMP trap to other systems

mznikkip — Thu, 19 Apr 2012 14:24:52 GMT

Ok done and done. Sorry for all the questions! I installed Net-SNMP but snmptrap does not appear in /usr/bin. In the directory where I did install it, I still don't even see /bin directory or 'snmptrap'.

Re: Send SNMP trap to other systems

briang67 — Thu, 19 Apr 2012 16:46:53 GMT

The snmptrap binary is in a separate rpm: net-snmp-utils.

Re: Send SNMP trap to other systems

mznikkip — Thu, 19 Apr 2012 18:22:31 GMT

Ahhh got it. I did a yum install for net-snmp-utils and now it seems to be working. Thanks for your help through this matter!