The log rotation should first rename the old file and only later delete it so that no traps are lost: Zabbix does not provide any log rotation system - that should be handled by the user. Note that the filesystem may impose a lower limit on the file size. The maximum file size that Zabbix can read is 2^63 (8 EiB).
Zabbix has "Large file support" for SNMP trapper files. 1.3.6.1.6.3.1.1.5.3 Normal "Status Events" localhost - Link down on interface 2. This will result in the following trap for SNMP interface with IP=192.168.1.1:ġ1:30:15 7. If the trap is formatted otherwise, Zabbix might parse the traps unexpectedly.ġ1:30:15 7. Note that "ZBXTRAP" and "" will be cut out from the message during processing.
- IP address used to find the host for this trap.ZBXTRAP - header that indicates that a new trap starts in this line.
SNMP trap formatĪll customized perl trap receivers and SNMPTT trap configuration must format the trap in the following way: ZBXTRAP, where Net-snmp agent does not support AES256 with SNMPv3/USM. Note: Starting with Zabbix 2.0.5, user macros and global regular expressions are supported in the parameter of this item key.Ĭatches all SNMP traps that were not caught by any of the snmptrap items for that interface. This item is supported since Zabbix 2.0.0. This item can be set only for SNMP interfaces. If regexp is unspecified, catches any trap. In the Key field use one of the SNMP trap keys: KeyĬatches all SNMP traps that match the regular expression specified in regexp. The address from each received trap is compared to the IP and DNS addresses of all SNMP interfaces to find the corresponding hosts. In Configuration → Hosts, in the Host interface field set an SNMP interface with the correct IP or DNS address. (This is configured by "Log unmatched SNMP traps" in Administration → General → Other.)Ĭonfiguring the following fields in the frontend is specific for this item type: