SCOM 2012 SNMP Trap - Does anyone have it working?
I am wondering if anyone out there has had any luck with getting SNMP Traps to be captured by SCOM 2012? Probes work fine. We have been unable to get SCOM 2012 to receive a SNMP Trap from network devices. We currently have a case open with Microsoft, but they dont have any answers as of yet. Here are the cliff notes version of what we have done so far. Discovery - OK The nodes discover without issue. I made sure they were set to SNMP only. I did this to verify we were talking SNMP and not just ICMP. Open Ports/Firewall Issues No firewalls are in place on the SCOM server and none exist between devices we are trying to get traps from. Using a port tool, I can see that UDP 162 is listening as expected and its the System Center Management Host Process that is running the process. We have tried having SNMP installed, but disabled, installed and running, and uninstalled. Currently we have the SNMP service installed and running. The SNMP Trap Service is NOT installed. Data Validation Using Wireshark running on the SCOM box I have been able to validate the OIDs we are searching for are hitting the SCOM server. I installed an SNMP Trap generator and Receiver on my local machine as well as Jalasoft SNMP Simulator. I was able to discover my local machine as a network device and if I send a TRAP from the TRAP generator on my local machine to the receiver on my local machine I can validate the data is coming through ok. What has been done on SCOM side The simplest place to look for data is with an Event Collection Rule and then an Event View Monitor. We have set up an Event Based Monitor to search for an OID that I know to be accurate and then I set up an Event monitor to look for anything hitting that Collection Rule. The Event monitor showed nothing so we changed the EVent Monitor to look for anything that hit Node which should show any SNMP traps that have hit from network devices. No results. We tried to run WFAnalyzer from the 2007R2 Authoring Console, but it wont run against 2012 and from what I have found the 2012 edition doesnt exist anywhere yet. So has anyone succesfully received a SNMP TRAP into SCOM 2012?
June 28th, 2012 3:50pm

I am in the same situation as yourself. We are evaluating SCOM 2012 and are trying to send SNMP traps to SCOM2012 from other devices/management systems. We've done more or less the same as you, we have also verified the traps are arriving at the SCOM server, but we haven't been able to see a single trap. The research that I've done it seems there's not much success or documentation for receiving/displaying SNMP traps in SCOM 2012. One of the areas of confusion is should the SNMP service and/or SNMP trap service be running and/or disabled or not? Also, should we use a rule or a monitor and which kind? We also tried the Event Based Monitor approach the same as you. I will watch this thread with interest. Good luck!
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2012 5:49am

Please check the following: Make sure the SNMP Service is running and set to automatic, and also make sure the SNMP Trap service if it is installed is stopped and set to disabled startup.Make sure you have configured the Security tab of the SNMP Service. Here you need to make sure that the required community string is defined and also define whether you want to only accept SNMP messages from specific hosts or all hosts. Roger
July 2nd, 2012 10:38am

Please check the following: Make sure the SNMP Service is running and set to automatic, and also make sure the SNMP Trap service if it is installed is stopped and set to disabled startup. Make sure you have configured the Security tab of the SNMP Service. Here you need to make sure that the required community string is defined and also define whether you want to only accept SNMP messages from specific hosts or all hosts. Roger Thanks for the response. Do you have SNMP Traps working? The reason I ask is our settings matchs your suggestions and we still dont get anything. Maybe we have a flaw in our testing. Our current test is as follows: Collection Rules>Event Based>SNMP Trap (Event) We have it searching for a specific OID Created a View in Monitoring for that RULE Send a trap with that OID Review the Monitoring rule.
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2012 11:19am

try this post:http://social.technet.microsoft.com/Forums/sk/operationsmanagergeneral/thread/41f5b6ef-c8b9-461d-bdcb-81fde5a89f50 Roger
July 2nd, 2012 11:28am

Thanks Roger, I believe I have seen every post on this topic that exists. Do you mind my asking if you have traps actually working in SCOM 2012?
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2012 11:30am

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as "Answered" as the previous steps should be helpful for many similar scenarios. In addition, wed love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks,Yog Li TechNet Community Support
July 4th, 2012 11:40pm

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as "Answered" as the previous steps should be helpful for many similar scenarios. In addition, wed love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks, Yog Li TechNet Community Support How could you possibly mark this as answered? No answer was given, it was quiet for a couple of days including one of which was a holiday in the US. The previous steps are NOT helpful. The question remains, Does anyone have it working? People have given troubleshooting advice, but nobody has actually answered the simple question. Do they have it actually WORKING?
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2012 10:38am

Hello Thank you for updating. As I said, I amrked it as answered to help the community members to focus on an reply which may be helpful. And if the issue still persists and you want to return to this question, please reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. Please remember to click Mark as Answer if any post does help, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks,Yog Li TechNet Community Support
July 8th, 2012 11:43pm

Hi ftfcu, Sorry for the late reply. That's great that you got it working. Thanks for posting. I'll try your solution when I get the chance and feedback - it might be a while though.
Free Windows Admin Tool Kit Click here and download it now
July 30th, 2012 5:43am

Hello ftfce, I performed same steps and also performed the following but no luck. Did I miss anything? As per online articles, I created a collection rule and also a monitor with blank OID to display all traps recieved by SCOM as an alert. 1.) The device in question is a Dell Equallogic storage device with SCOM as a Trap destination and correct community string is configured. 2.) On SCOM side SNMP Trap Service was disabled (didn't work), then uninstalled and a reboot was triggered (that too didn't work). 3.) The rule and monitors were configured keeping in mind that no OID, correct SampleVarBind string etc as per knowledge available on the web. 4.) We fired more alarms on the SAN side but nothing seems to be coming into SCOM. Anyone with experience in resolving this issue? Please share as this will prove to be a big help. We also have few other SNMP devices that need to be sending traps to SCOM 2012, what's the correct approach? I guess we have to populate device's OID for that. Cheers, Kapil Dham
October 12th, 2012 2:18pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics