Werk #1845: Keep record of original source IP address of a syslog message or SNMP trap

Component Event Console
Title Keep record of original source IP address of a syslog message or SNMP trap
Date Jan 17, 2015
Checkmk Edition Checkmk Raw (CRE)
Checkmk Version 1.2.7i1
Level Prominent Change
Class New Feature
Compatibility Compatible - no manual interaction needed

The Event Console now stores the original source IP address when receiving an event directly via an SNMP trap or the builting syslog server. This ipaddress is put into a new dedicated field in the event and is shown in the details of the event. In the event rules you can now match on this address using a X.X.X.X/Y networking syntax.

Note: If you receive syslog messages forwarded from another syslog server, then you will see the IP address of that server there - not from the original message.

To the list of all Werks