Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Network Node Manager i Software10.30

Administer > Configure Incidents > Manage Incoming SNMP Traps > Analyze Trap Information

Analyze Trap Information

NNMi measures the rate of incoming SNMP traps regardless of Incident Configuration, including the following:

Traps from each Node.
Traps for each SNMP Object Identifier (OID).

NNMi monitors the incoming SNMP traffic flow to determine whether the number of traps received within a certain time period exceeds any set threshold. If a threshold is exceeded, NNMi blocks processing of additional traps until the number of traps is below the threshold set for each time period.

The NNMi administrator configures thresholds for trap volume within your network. Choices include count-based or time-based thresholds for total volume or for each trap OID. You can also block traps. See the following Reference Pages:

When analyzing traps, NNMi looks at both the most common traps as well as the most common Source Nodes from which the traps are received. NNMi logs this SNMP trap analytics data to the trapanalytics.0.0.log file.

(NNM iSPI NET) If Network Node Manager iSPI Network Engineering Toolset Software is available in your network environment, you can obtain reports about incoming SNMP traps according to the criteria described in the Trap Analytics Reports table.

Note the following:

The time interval and number of Nodes or SNMP OIDs included in the reports and Line Graphs is based on the numbers configured using the nnmtrapconfig.ovpl script. By default, NNMi uses 5 minutes as the time interval and 10 as the top number of Nodes and SNMP OIDs for which information is computed.
NNMI identifies each trap using its SNMP Object Identifier (OID) number.
NNMi enables you to open the following graphs, reports, and forms from a Trap Analytics report:
- Line Graph of the trap rate for all of the Nodes or SNMP OIDs displayed in the report.
- Line Graph of the trap rate for a selected Node or SNMP OID.
- SNMP Trap Incident Configuration form, if any, for an SNMP OID.
- Source IP Address and Node form for a Node.
  The Source Node must be stored in the NNMi database for the links to appear.
- MIB Variable form, if any, for the selected SNMP OID.
  
  The MIB Variable must be stored in the NNMi database. To add a MIB Variable by loading a trap, see Load SNMP Trap Incident Configurations
When you access a Line Graph from a report, the Line Graph displays an updated real-time data using the Nodes or SNMP OIDs included in the report. Because the trap rate is constantly changing, the data in the Line Graph will not match the historical trap numbers displayed in the report.
If an SNMP Trap Incident Configuration exists for a trap, NNMi displays the name of the SNMP Trap Incident Configuration as well as whether the SNMP Trap Incident Configuration is disabled. This feature is useful when you want to make changes to the incident configuration. For example, you might want to enable or disable the incident configuration.
NNMi discards traps that have no incident configuration or with an incident configuration set to Disabled. To ensure that NNMi retains all received Trap instances when your network environment includes SNMP agents using a variety of SNMPv1, SNMPv2c, and SNMPv3 protocol, you must configure two Incidents: one for the SNMPv1 version and one for the SNMPv2c/3 version of that trap. See Configure SNMP Trap Incidents.

See the Trap Analytics Reports table for more information about the links available from each report.

To access the Trap Analytics reports:

Requires Network Node Manager iSPI Network Engineering Toolset Software (NNM iSPI NET) and requires installation of a Diagnostic Server.

Select Tools → Trap Analytics.
Select the graph or report of interest. from the Trap Analytics submenu.
NNMi displays the selected report (see Trap Analytics Reports).

(*NNM iSPI NET*) Trap Analytics Reports
Report	Description	Links Available from the Report
Recent Top Trap Rate (by Node)	Table view of the Nodes that are most frequently generating traps during the specified time period.	Line Graph of the Nodes that are most frequently generating traps. Recent Top Rate Traps Received (by OID) report Total Traps Received (by Node) Total Traps Received (by OID) Line Graph of the trap rate for the selected Node. Source Node form, if any, for the trap.
Recent Top Trap Rate (by OID)	Table view of the traps that are most frequently generated during the specified time period.	Line Graph of the traps that are most frequently generated. Recent Top Rate Traps Received (by Node) report Total Traps Received (by Node) Total Traps Received (by OID) Line Graph of the trap rate for the selected SNMP OID. Incident Configuration form, if any, for the selected SNMP OID. MIB variable form, if any, for the MIB variable that is associated with the SNMP OID.
Total Traps Received (by Node)	Table view of the trap totals since NNMi was last started. This report is organized by traps per Node.	Line Graph of the total number of traps received per Node since NNMi was last started. Total Traps Received (by OID) report Recent Top Trap Rate (by Node) Recent Top Trap Rate (by OID) Line Graph of a selected Node's total traps in real time. Source Node form, if any, for the selected trap.
Total Traps Received (by OID)	Table view of the trap totals since NNMi was last started. This report is organized by traps per SNMP OIDs.	Line Graph of the total number of traps received since NNMi was last started. Total Traps Received (by Node) report Recent Top Trap Rate (by Node) Recent Top Trap Rate (by OID) Line Graph of the selected SNMP OID's total traps in real time. Incident Configuration form, if any, for the selected SNMP OID. MIB variable form, if any, for the MIB variable that is associated with the SNMP OID.
Trap Analysis Log	Log file listing trap information organized by the following criteria: Trap rate in number of traps per second The top 10 addresses that are generating traps The top 10 traps that are being generated This information is recomputed every 5 minutes as configured in nnmtrapconfig.ovpl. Scroll to the bottom to see the latest entry. The NNMi administrator can configure threshold values using the nnmtrapconfig.ovpl script. You can also use the `nnmtrapdump.ovpl` command to extract the data in which you are most interested from the `trapanalytics.0.0.log` file. See the nnmtrapdump.ovpl Reference Page for more information (Help → Documentation Library → Reference Pages, in the User Commands category).

Send Help Center feedback