Need assistance for Trap Alerts

Good morning community. I am new here. We started to use librenms recently. And I have probably a simple question. I am configuring alerts for incoming from eventlog traps from juniper/cisco routers and switches follow this configuration
(eventlog.type = “interface” AND eventlog.message LIKE ‘%(TRAP)%’)

The Template Alert is configured in such way.

{{ $alert->title }}
Severity: {{ $alert->severity }}
@if ($alert->state == 0) Time elapsed: {{ $alert->elapsed }}
@endif Timestamp: {{ $alert->timestamp }}
Unique-ID: {{ $alert->uid }}
Rule: @if ($alert->name) {{ $alert->name }} @else {{ $alert->rule }} @endif
@if ($alert->faults) Faults:
@foreach ($alert->faults as $key => $value) Faults :

     Trap Messsage :  {{ $value['message'] }}
     EventID:     {{ $value['eventiD'] }}
     Datetime:   {{ $value['datetime'] }}    

It works perfect, unfortunately I am getting trap messages for more than 10 days on every alert message ,Is there a way to filter the most recent traps according to the day/time instead of getting all traps of the week?
Appreciate for your help.

1 Like

use macros.past_5m

Thank you Kevin, I will try and update you.

Good afternoon Kevin, I tried to add
eventlog.type = “interface” AND eventlog.message LIKE ‘%(TRAP)%’ AND syslog.timestamp >= “%macros.past_5m”)

still no luck.
However I didn’t see %macros.past_5m in the config.php. Should I add something to implement this ?

Can you post a screen shot of the alert rule

sure :

You have syntax error with the macro it should be


Try putting the Macros first with these back brackets ``

1 Like

Thank you ionline,
I tried this as well but still no luck …
does eventlog.datetime and syslog.timestamp will do the same thing ?

greater than or equal

Thank you a lot. Kevin and Ionline …

this config is working for me