SNMP Traps

SNMP Traps (Simple Network Management Protocol Traps) are asynchronous notifications sent by network devices, servers, or applications to a management station to report significant events or state changes.

Unlike polling-based monitoring where the management system periodically requests status information, traps are sent immediately when notable events occur. This makes them ideal for real-time alerting on network infrastructure issues, device failures, and threshold violations.

Data Flow

The following diagram shows how SNMP traps flow through Log Collector's ingestion pipeline:

flowchart LR A[Network Devices] --> B[SNMP Trap] B --> C[LogScale SNMP Listener] C --> D[Parser Pipeline] subgraph "Parser Types" D --> D1[SNMP Trap Parser] D --> D2[OID Resolver] D --> D3[MIB Parser] D --> D4[Network Event Parser] end D1 & D2 & D3 & D4 --> E[Compression] E --> F[Repository Storage]
flowchart LR A[Network Devices] --> B[SNMP Trap] B --> C[LogScale SNMP Listener] C --> D[Parser Pipeline] subgraph "Parser Types" D --> D1[SNMP Trap Parser] D --> D2[OID Resolver] D --> D3[MIB Parser] D --> D4[Network Event Parser] end D1 & D2 & D3 & D4 --> E[Compression] E --> F[Repository Storage]

LogScale can receive SNMP traps through ingest listeners configured to accept SNMP traffic. The system parses trap messages, extracts OID (Object Identifier) values, and converts them into searchable events for infrastructure monitoring and troubleshooting.