T-ISP-029 · SNMP Trap Correlator

Ingest a stream of SNMP traps, correlate related events within a time window (link flaps, BGP resets, power), suppress duplicates, and emit deduplicated incidents with root-cause hints.

Cisco IOS/XE

Juniper Junos

Arista EOS

Nokia SR OS

Open in Generator Open in Platform

You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Already have access? Sign in →

Capabilities

Trap stream ingest
Time-window correlation
Duplicate suppression
Root-cause hinting
Flap-storm detection
Incident JSON output

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

Parameter	Type	Default	Notes
Correlation window (s) window_s	number	60	—
Flap-storm count flap_threshold	number	5	—

Hint 1 — Name your vendors and OS versions

Mention the exact platforms you run (Cisco IOS/XE, Juniper Junos, Arista EOS, …) so the generated isp & peering logic uses the right CLI/NETCONF syntax.

Hint 2 — State your real thresholds

Provide concrete values for Correlation window (s), Flap-storm count instead of the defaults — they shape what counts as a fault.

Hint 3 — Prioritize the checks you need

This tool can trap stream ingest and time-window correlation. Ask for the subset relevant to your incident to keep output focused.

Hint 4 — Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal

2026-06-15 22:00:00 INFO  Ingested 1842 traps
2026-06-15 22:00:00 INFO  Correlated into 37 incidents (1805 suppressed)
2026-06-15 22:00:00 WARN  INC-014: link-flap-storm on core-rtr-03 Te0/2 (8 flaps/60s)
2026-06-15 22:00:00 INFO  Incidents written to incidents.json