syntax for SNMPTRAP IGNOREFILTER

[Steffen_Muessig]

Hi all

I use the SNMPTRAP feature by Prognosis. Now I want some TRAPS to ignore. But I struggle with the syntax of the IGNOREFILTER line. Can you please give me some hints for the following filter I want to use:

IGNOREFILTER ('TRAPNAME contains "CDRPush" or TRAPNAME CONTAINS "sonusEmsV2LoginFailure" or TRAPNAME CONTAINS "sonusSoftSwitchPesRegister" or VENDOR contains "integrated" or TRAPNAME contains "apSysMgmtSAStatusChangeTrap" or FORMDESC contains "sonusSoftSwitchPesUnregister" or FORMDESC contains "minderrorSeverity.0:6" or FORMDESC contains "1.3.6.1.4.1.5826.1.1.0rocessor 1.3.6.1.4.1.5826.1.2.0:6 1.3.6.1.4.1.5826.1.4.0: 1.3.6.1.4.1.58263.1.2.1.1.2."')

When I use only following it works:

IGNOREFILTER ('TRAPNAME contains "CDRPush" or VENDOR contains "integrated" or TRAPNAME contains "apSysMgmtSAStatusChangeTrap" or FORMDESC contains "minderrorSeverity.0:6" or FORMDESC contains "1.3.6.1.4.1.5826.1.1.0rocessor 1.3.6.1.4.1.5826.1.2.0:6 1.3.6.1.4.1.5826.1.4.0: 1.3.6.1.4.1.58263.1.2.1.1.2."')

But I need to expand it more and more.

What is wrong in my filter ?

Many thanks

Steffen

[SCOTT_BALDWIN]

Hello @Steffen_Muessig,

The non-working IGNOREFILTER statemet appears to have correct syntax when compared to the working IGNOREFILTER statement. The only difference being the 3 additional "or" statements. There might be some issue not showing correctly in this post (such as non-printable characters).

This issue will require additional troubleshooting by the Support team.

Please open a Support case with the following:

1. A fresh irfax.
2. Save a copy of the working and non-working SNMPTRAPS.cnf configuration files and provide them for review.

Thank you,
Scott Baldwin