User Guide for Cisco Unified Operations Manager 2.2
Processed and Pass-Through Traps
Downloads: This chapterpdf (PDF - 116.0KB) The complete bookPDF (PDF - 13.05MB) | Feedback

Processed SNMP Traps

Table Of Contents

Processed SNMP Traps

Processed SNMP Traps

Multiple Processed SNMP Traps and the Event Details Displayed for Them

Processed SNMP Traps and Corresponding Operations Manager Events

Unidentified Traps


Processed SNMP Traps


How Cisco Unified Operations Manager (Operations Manager) treats SNMP traps are described in these topics:

Processed SNMP Traps

Unidentified Traps

Processed SNMP Traps

When Operations Manager receives certain SNMP traps, it analyzes the data found in the following fields of each SNMP trap message, and changes the property value of the object property (if required):

Enterprise (the sysobjectID of the agent/object)

Generic Trap Identifier

Specific Trap Identifier

Variable-Bindings

IP address of the SNMP agent


Note Use Notifications to forward specific traps to e-mail recipients or host machines. See Chapter 15, "Using Notifications."


Multiple Processed SNMP Traps and the Event Details Displayed for Them

For every specific trap, Operations Manager generates one event (see Processed SNMP Traps and Corresponding Operations Manager Events). For subsequent traps with the same specific trap identifier, but different object values, Operations Manager does nothing more until the trap clears. Operations Manager takes about ten minutes to clear an SNMP trap.

As a result, the Event Details display (accessible from the Alerts and Events display) shows the information obtained from the first trap that caused the event. For example, if the first trap contains Extension 101, and subsequent traps contain Extension 102 and Extension 103, Extension 101 continues to be displayed. Operations Manager updates this information only after clearing the trap and receiving the same specific trap from the device.

Processed SNMP Traps and Corresponding Operations Manager Events

This section lists the traps that Operations Manager processes and the event that Operations Manager generates for each trap.

Processed Standard SNMP Traps (RFC 1215)

SNMP Trap
Corresponding Operations Manager Event

Cold Start

RepeatedRestarts

Warm Start

Link Up

Flapping

Link Down

Authentication Failure

MinorAlarm


Processed CISCO-STACK-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

Module Up

CardDown

Module Down

lerAlarmOn

MinorAlarm

lerAlarmOff

ipPermitDeniedTrap

MinorAlarm

sysConfigChangeTrap


Processed CISCO-ISDN-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

demandNbrLayer2Change

OperationallyDown


Processed CISCO-NotificationEvent-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

QoVMOSViolation

ServiceQualityIssue

SMLostContactWithSensor

SensorDown


Processed CPQHLTH-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

cpqHeThermalSystemFanFailed

FanDown

cpqHeThermalSystemFanDegraded

FanDegraded

cpqHeThermalTempFailed

TemperatureSensorDown

cpqHeThermalTempDegraded

TemperatureSensorDegraded


Processed IBM-SYSTEM-RAID MIB

SNMP Trap
Corresponding Operations Manager Event

ibmServeRaidDefunctDrive

IBMDiskTrapEvent


Processed CISCO-UNITY-EXPRESS-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ciscoUnityExpressApplAlert

CUEApplicationStatusChange

ciscoUnityExpressStorageAlert

CUEStorageIssue

ciscoUnityExpressSecurityAlert

CUESecurityIssue

ciscoUnityExpressCallMgrAlert

CUECCMConnectionLost

ciscoUnityExpressRescExhausted

CUEResourceExhausted

ciscoUnityExpressBackupAlert

CUEBackupFailed

ciscoUnityExpressNTPAlert

CUENTPIssue


Processed CISCO-CCME-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ccmeEPhoneDeceased

CCMEEphoneDeceased

ccmeEphoneLoginFailed

CCMEEphoneLoginFailed

ccmeEPhoneRegFailed

CCMEEphoneRegistrationFailed

ccmeEphoneUnRegThresholdExceed

CCMEEphoneRegistrationsExceeded

ccmeKeyEphoneRegChangeNotif

CCMEKeyEphoneRegistrationChange

ccmeLivefeedMohFailedNotif

CCMELivefeedMOHFailed

ccmeMaxConferenceNotif

CCMEMaximumConferencesExceeded

ccmeNightServiceChangeNotif

CCMENightServiceChange

ccmeStatusChangeNotif

CCMEStatusChange


Processed CISCO-SRST-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

csrstFailNotif

SRSTRouterFailure


Processed CISCO-MEETINGPLACE-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

mpMajSwAlarm

MeetingPlaceSwAlarm


Processed CISCO-CONTACT-CENTER-APPS-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

cccaIcmEvent

IPCCSingleStateNotification/IPCCDualStateNotification


The following are the values (as part of trap varbinds) which Operations Manager receives as part of the trap cccaIcmEvent:

cccaEventComponentId

cccaEventState

cccaEventMessageId

cccaEventOriginatingProcessName

cccaEventTimestamp

cccaEventText

The value cccaEventState is used to identify whether to raise IPCCSingleStateNotification or IPCCDualStateNotification based on the following:

Raise—A raise state identifies a notification received as a result of a health-impacting condition, such as a process failure. A subsequent clear state notification will follow when the error condition is resolved.

SingleStateRaise—The single state raise indicates that a health-impacting error has occurred and that a subsequent clear state notification will not be forthcoming. An example of a single state raise condition is an application configuration error that requires the system to be stopped and the problem resolved by an administrator before the affected component will function properly.

For additional information on the supported list of dual state traps, see the Serviceability Best Practices Guide for Unified ICME, Unified ICMN, Unified CCE, and Unified CCH.

Processed CISCO-ACCESS-ENVMON-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

caemTemperatureNotification

InformAlarm

caemVoltageNotification

MinorAlarm


Processed CISCO-CONFIG-MAN-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ciscoConfigManEvent

InformAlarm


Processed CISCO-CONTENT-ENGINE-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ciscoContentEngineWriteTransFailed

MajorAlarm

ciscoContentEngineOverloadBypass


Processed CISCO-DEVICE-EXCEPTION-REPORTING-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

cderMonitoredExceptionEvent

InformAlarm


Processed CISCO-ENTITY-FRU-CONTROL-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

cevFanONS15540FanTray8

MajorAlarm

cevPortTransparent

cevPortWave


Processed CISCO-ENVMON-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ciscoEnvMonShutdownNotification

InformAlarm


Processed Repeater MIB Traps

SNMP Trap
Corresponding Operations Manager Event

rptrHealth

MinorAlarm

rptrGroupChange

InformAlarm

rptrResetEvent


Processed CISCO-RHINO-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

ciscoLS1010ChassisFailureNotification

MajorAlarm

ciscoLS1010ChassisChangeNotification

InformAlarm


Processed CISCO-RTTMON-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

CiscoRTTMon_rttMonConnectionChange
Notification

InformAlarm

CiscoRTTMon_rttMonTimeoutNotification

CiscoRTTMon_rttMonThresholdNotification

MajorAlarm

CiscoRTTMon_rttMonVerifyErrorNotification

InformAlarm

CiscoRTTMon_rttMonNotification

MajorAlarm


Processed CISCO-STP-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

STPnewRoot

MajorAlarm

STPtopologyChange

MinorAlarm


Processed CISCO-VLAN-MEMBERSHIP-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

vmVmpsChange

MajorAlarm


Processed CISCO-VPDN-MGMT-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

CiscoVpdnMgmt_cvpdnNotifSession

MajorAlarm


Processed CISCO-VTP-MIB Traps

SNMP Trap
Corresponding Operations Manager Event

vtpConfigRevNumberError

InformAlarm

rvtpConfigDigestError InformAlarm

vtpServerDisabled MinorAlarm

MinorAlarm

vtpMtuTooBig MinorAlarm

vtpVlanRingNumberConfigConflict MinorAlarm

vtpVersionOneDeviceDetected InformAlarm

InformAlarm

vlanTrunkPortDynamicStatusChange InformAlarm


Unidentified Traps

The "Unidentified Trap" bucket may contain events that may be raised under the following circumstances:

When an event occurs on a device that is being discovered by Operations Manager.

When an event occurs because of certain traps, sent by a device that Operations Manager does not manage.