skills.rest
netdata
netdataOFFICIAL
Explore all skills by this author →
WebsiteGitHub

query-snmp-traps

Analyze SNMP trap logs and extract structured event data from Netdata Agent journal files.

80.4k|6.6k|Updated Jun 17, 2013
Search Tags:#logs#network#traps#Netdata#Monitoring#SNMP
One-click install
npx skills add https://github.com/netdata/netdata --skill query-snmp-traps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: query-snmp-traps
Source: https://github.com/netdata/netdata/tree/main/docs/netdata-ai/skills/query-snmp-traps
Command: npx skills add https://github.com/netdata/netdata --skill query-snmp-traps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the complexity of monitoring and debugging SNMP trap storms by providing a structured, queryable interface to trap journal entries, allowing operators to filter by severity, source, and varbind fields.

Core Features & Use Cases

  • Structured Querying: Filter traps by severity, source IP, or specific MIB-indexed varbind fields using the Netdata snmp:traps Function.
  • Storm Analysis: Inspect deduplication summaries to identify flap sources and suppressed trap counts during high-volume events.
  • Custom MIB Integration: Convert vendor-specific MIBs into Netdata trap profiles to resolve unknown OIDs into human-readable trap names and categories.

Quick Start

Use the query-snmp-traps skill to list all critical traps received from a specific device in the last hour.

Frequently Asked Questions about query-snmp-traps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I filter SNMP traps by severity across my fleet?▼

Use the `snmp:traps` Function with the `TRAP_SEVERITY` selection filter. For fleet-wide queries, iterate through node UUIDs in your room, execute the query on each node, and aggregate the results locally using jq.

What is the best way to handle unknown SNMP trap OIDs?▼

Convert your vendor-specific MIB files into Netdata trap profiles using the `snmp-trap-profile-gen` helper. This maps numeric OIDs to descriptive names, categories, and severities in the logs.

Can I see how many traps were suppressed during a flap storm?▼

Yes, query the `snmp:traps` Function with `TRAP_REPORT_TYPE` set to `deduplication_summary`. This returns entries containing `TRAP_SUPPRESSED_COUNT` and `TRAP_REPORT_PERIOD_SEC` for your analysis.

Why are my SNMP traps not appearing in the logs?▼

Verify that the `snmp_traps` collector is running and that `journal.enabled` is set to `true` in your configuration. If the job is missing from `__logs_sources`, the collector may not be writing to the local journal.

Related Skills

Explore More Data & Analytics Skills→
wyre-technologywyre-technology
39

Atera Device Monitoring

Configures HTTP, SNMP, and TCP monitors for network devices via Atera.

Official
Intermediate
tannergoldentannergolden

Operator

Automate system operations oversight and incident response workflows.

Community
Advanced
openeuler-mirroropeneuler-mirror
3

docker-fault-analysis

Correlate kernel events, cgroup metrics, and runtime logs to diagnose Docker container failures.

Official
Advanced
Prompt-or-Die-LabsPrompt-or-Die-Labs
7

log-aggregation-configurator

Configure centralized logging with ELK, Loki, or Splunk across services and environments.

Official
Intermediate