Link up/down trap event variables

[Legacy User]

Hello,

 

Hoping this is an easy one. We have "LINK UP/DOWN TRAPS RECEIVED IN THE LAST 5 MINUTES EXCEEDS THRESHOLDS" enabled and the alarm details only include the the interface index as such:

 

A(n) GnSNMPDev device, named XXXXXXX, has received over 15 Communication Link Up and Down Trap pairs in the last 5 minutes. An alarm will be created on the device.

 

ifIndex = 1144
ifDescr =
ifType =
ifAdminStatus = up
ifOperStatus = up

 

Is there any way to display the interface name? I could not find any reference to any event variables that are available with this particular event. Would greatly reduce troubleshooting time for our Ops team if we can include interface name in the alarm message.

 

Thanks!

[Mohammed Alfakhrany]

Hi Fue,

 

We have Knowledge Base (KB) article that describes how to add various attributes (such as interface alias) to the alarm titles to make them more meaningful. You can see this at the following link:

 

Adding model attributes to an Alarm Title

 

Its a fairly detailed description of how to customise the alarm title using a couple of examples. Go through it and see if it helps.

[Glenn Shoemake]

Just to add out of the box this alarm is based on receiving 15 "60 second communication link up/down pair events (event id 0x00220006)" within a 5 minute period. However, these link up/down pairs do not have to be on the same interface.   The alarm is always on the 15th event interface, but in reality may not be the one flapping.

 

Please check this KB article in order to create a discriminator for the interface

 

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC602286.html

 

Then as my colleague Mohammed as mentioned you can add the interface alias to the alarm titles.