...
The plugin will receive a number of audit messages. These audits represent states, logs , or actions reported by the various services. These messages are to be transferred as a trap via the SNMP protocol.
...
Name of the audit message (SOURCE) | Description | SEVERITY | Variables JSON DETAILS | Description of the variable | Type of the variableAudit Existing or | ||
STLNK (to be created) | STLNK | State of the protocol link of the north or south services | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created|
nameLink | Name of the protocol link (name of the PA for example) | String | |||||
valueLink | Link status. | enum :
| |||||
STCHA (to be created) | Status of the north or south service protocol channels | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created||
nameLink | Name of the protocol link | String | |||||
nameChannel | Name of the TCP connection | String | |||||
valueChannel | State of the TCP connection | enum :
| |||||
STSRV (to be created) | State of services north or south | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created | |
valueService | State of the service sending the notification. (1) | enum :
| |||||
START | Starting the FLEDGE system | SUCCESS, FAILURE, | Existing | ||||
FSTOP | Stopping the FLEDGE system | SUCCESS, FAILURE, | |||||
CONCH | Configuration update | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | StringExisting | ||
SRVFL | Failure of a service (failure to start, crash at runtime...) | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | Existing | |
errorService | Service error in the form of a string | String | |||||
SNAUF (to be created) | Authentification failure SNMP v3 | SUCCESS, FAILURE, | |||||
EVTIF (to be created) | EVTIF | évènement type INFO | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created |
nameEvent | Name of the event | String | |||||
valueEvent | Description of the event | String | |||||
EVTWA (to be created) | évènement type WARNING | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created | |
nameEvent | Name of the event | String | |||||
valueEvent | Description of the event | String | |||||
EVTFA (to be created) | évènement type FATAL | SUCCESS, FAILURE, | nameService | Name of the service sending the notification. (1) | String | To be created||
nameEvent | Name of the event | String | |||||
valueEvent | Description of the event | String |
...
SNMP trap name | Variable Objet | Description variable objet |
Evt (OID) | nameGateway (OID) | Name of the gateway (hostname) |
nameService (OID) | Name of the service | |
nameEvent (OID) | Name of the event. Take the name of the audit. | |
labelVariable (OID) | Label of the variable | |
valueVariable (OID) | Event value (log description, connection status, service status ...) | |
severity (OID) | Severity of the eventaudit | |
date (OID) | Date of receipt of the audit |
...
Common fields for all traps:
- "nameGateway " = hostname of the gateway
- Datedate
- Severityseverity
Correspondence with audit variables
...
The configuration of the plugin allows the link between the audit variables and the SNMP trap objects.
It also allows to fill in the following information:
...
Attributes definition
Attribute | Description | Expected values | Mandatory |
---|---|---|---|
oid | OID of the trap or OID of the objects include in the trap | texte value respecting OID format | Yes |
"1".."7" | Order index number of the objects include in the trap | "1" to "7" | Yes |
dest | name of the object in the trap | string | Yes |
origin | origin of the data | "audit", "env", "static" | Yes |
value | Value of the data |
|
...
|
...
Yes |
Configuration :
{
"link_audit_trap": {
"description":"Correspondence between audit and trap",
"type":"json",
"default":"",
"order":"1",
"displayName":"Link audit trap"
}
}
...