Forum Discussion

Jeff_Kinny's avatar
Jeff_Kinny
Icon for Contributor III rankContributor III
27 days ago
Solved

Create event in absence of "heartbeat" trap

We have a certain type of device that we are not allowed to do active SNMP monitoring, only traps. It sends us a heartbeat trap every minute as long as it is "up". Is there a way to make an event policy that alerts in the absence of an event? In this case, we would need to generate a critical event if the heartbeat hasn't been received for > 10 minutes. I currently have the heartbeat trap set as a "healthy" event policy. Apologies if there is some documentation about this topic that I have missed!

  • We have done this with an RBA. Setup an Automation policy, change policy type to 'Cleared events', then set the device and the healthy event. Align an 'Action' that inserts a new event into your API for the critical. Make sure the healthy event expires in 10 minutes. Then when the healthy event expires/becomes no longer active, the automation will trigger.

2 Replies

  • DanBuck's avatar
    DanBuck
    Icon for Contributor II rankContributor II

    We have done this with an RBA. Setup an Automation policy, change policy type to 'Cleared events', then set the device and the healthy event. Align an 'Action' that inserts a new event into your API for the critical. Make sure the healthy event expires in 10 minutes. Then when the healthy event expires/becomes no longer active, the automation will trigger.

  • Hello Jeff,

    To generate an event requires a log message to trigger it, whether it be an incoming SNMP trap or the results of an alert formula from a dynamic app. There is no mechanism to trigger an event in the absence of a log message. 

    I am not sure what "up" means in this context but if it means that the device is turned on and running, then monitoring availability via ping may be a better option.

    Antonio Andres

    Principal Technical Support Engineer | ScienceLogic