Level: Major

Purpose: Notify operations that the number of mNET traps from a controller is high and may affect Snmp Manager Performance

Scenario: Greater than 3000 mNET traps have been received from a mNET Controller in the last hour. The count query is run every 30 minutes and returns the top 5 mNET traps.

Resolution: Monitor mNET trap count, alert may clear after 30 minutes.

Manual Action Steps: Monitor trap count and verify if it is getting higher or lower. If trap count is increasing rapidly a trap ignore rule may be required.

select
  count(*) as count, ip_address as ip, name_oid as oid, name
from
  snmp_manager.trap
where
  name_oid like '.1.3.6.1.4.1.35805%'
  and (date > (now() - interval 1 hour)) group by 2,3 order by 1 desc limit 5;

Auto Clear: Will clear when trap count for controller goes below 3000