I have 4 SS's in a fault tolerant setup. One of them is designated as the trap director. I'd like to verify that traps are being received, so I'm using the following queries:
mysql> select count(*) from event where vardata_string like '%Alert Has Posted%'; +----------+ | count(*) | +----------+ | 20158 | +----------+ 1 row in set (1.42 sec) mysql> mysql> select from_unixtime((select max(utime) from event where vardata_string LIKE '%Alert Has Posted%')); +--------------------------------------------------------------------------- -------------------+ | from_unixtime((select max(utime) from event where vardata_string LIKE '%Alert Has Posted%')) | +--------------------------------------------------------------------------- -------------------+ | 2011-10-29 07:25:01 | +--------------------------------------------------------------------------- -------------------+ 1 row in set (1.44 sec) mysql> According to the query above, it appears my last trap entered the event table on 10/29/11. All three of my SS's are showing the same exact time that the last trap came in. On the box designated as the trap director, it is showing no records in the event table that have 'Alert Has Posted' in the vardata_string. Other than searching the vardata_string for 'Alert Has Posted', what else should I be looking for in the ddmdb that will confirm whether traps are coming in to the db. I plan on snooping the interfaces for port 162 traffic, but I'd like to know if there is anything I can look at or if there is something I'm missing. Keep in mind, the SS's seem to be functioning normally. Thanks. Calvin --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
