Scroll to...

Intro Modernize Rules Categorized Search Tool Forwarding NMS-Like Advanced Text Events DevOps Enterprise Speed Requirements Demo

Augur®-TS
TrapStation

TrapStation logs and forwards events to distributed management systems. But it does a lot in between. You can selectively route events, translate protocols, filter, correlate events, apply thresholds, and modify events. Then view graphs, search logs, and replay events. TrapStation's design is based on decades of event-handling experience. Customers routinely tell us there is nothing else like it.

Diagram: Traps flow through TrapStation to multiple NMSs

Today's Networks…

…never stop growing. Equipment and software processes generate events by the thousands. Full-featured network management systems (NMS) struggle under the load. Sometimes events are lost due to overflows. Daily restarts clear the backlog, but turn a blind eye to what was lost. What is needed today is a layer optimized for speed, to process events almost as fully as the NMS, to reduce the raw load without losing anything.

Modernize

TrapStation was designed to leapfrog legacy event hubs that do little to reduce an NMS's load or your effort to configure it. Enjoy SNMP v3 encryption/security, event modification, search/replay, a browser interface, and active support.

Tree-based Rules

TrapStation maps incoming events/traps to your rule tree nodes. Each node has a filter to test events, and options to log and forward matching events. Nested tiers form progressively specific tests, which reduces the complexity of individual rule nodes. Nesting ensures that a partially-matched event falls into a fail-safe rule node. And in general, TrapStation's tree-based rules promote a logical organization that is safer to maintain over time.

Rule tree nodes
Browser Screenshot: A sample rule tree

Your Traps, Categorized

TrapStation's rule tree is a visual categorization of your events. So rule pathnames are perfect buckets for statistics. Each event's rule pathname is also stored in logs, so you can filter on it when using the search tool.

Frequency chart: number of traps per rule tree node
Browser Screenshot: Distribution of events received per rule tree node
Example of a trap report, showing header info and varbinds
Browser Screenshot: An SNMP trap found with the search tool

Search Tool

Your logs can accumulate millions or billions of events. TrapStation helps you find the ones you need, with multiple layers of filters. You can browse or save results, and replay them to one of your targets for testing. You can filter the live stream too, collecting real-time results to browse/save/replay.

TrapStation Search Tool
Browser Screenshot: Search criteria

Event Forwarding

You choose forwarding target(s) at each rule tree node. So to route some events differently, just match them at a different node, then apply different targets. Targets are typically your NMS/SNMP managers, and sometimes log files. TrapStation's target plug-ins support special needs, for example: a "round-robin" load balancer; a direct integration to your database, Kafka, Splunk®, etc. Do you need to convert v3 traps to v2 for feeding a legacy system, and simultaneously convert all v1/v2 traps and syslogs to v3 traps for a secure external target? No problem.

Diagram: TrapStation Forwarding Flow

NMS-Like Tools

Although TrapStation is not intended to replace your network management systems, it includes validation options at each rule tree node. You don't have to use them, but they are available to help you significantly reduce forwarding of unwanted, spurious, redundant, and "flapping" events to your NMS.

TrapStation's Alerts Tab
Browser Screenshot: Alerts visualize the rule engine's validation work.

For Advanced Users

TrapStation's rule tree nodes are powered by a JavaScript® engine that has been enhanced for handling both traps and text events. You can perform calculations, query trap fields, manipulate varbinds, and more, while using the well-known JavaScript syntax. Your work can be spread across script engines, for true multi-threaded scaling. Also, a JavaTM virtual machine is integrated with the JavaScript engine, so your rules can access external systems via Java's vast APIs.

Browser Screenshot: A rule tree node's script editor
Browser Screenshot: Event processing at a rule tree node

Beyond Traps

Any event streams can be handled by your rule tree syslog, webhook, TL1, custom sockets, etc. Parser plug-ins make a protocol's event fields available to your rule scripts. For example, the syslog parser plug-in helps you reliably access each log's fields, and other parsers decode the fields of binary protocols. Formatter plug-ins help you reshape logs and forwarded events. For example, sensitive information can be stripped, look-up data can be added, and the entire syntax can be changed, e.g. to JSON. And of course TrapStation can convert any event to an SNMP trap, then forward/log just like all your native traps.

DevOps-Friendly

Installation is just a tar file, with no dependencies. Next, TrapStation's rule tree compartmentalizes your custom logic to limit your scope of work, and potential problems. The GUI has pre-deployment testing tools, and provides one-click deployment without downtime. Both live and historical reporting provides operational feedback. So time to code/test/deploy meets DevOps' speedy expectations.

Enterprise

TrapStation addresses the special concerns of large companies: redundancy, security/encryption, and centralized authentication/authorization:

Speeding Through Event Storms

Bursts of events traffic (thousands per second) are safely handled by TrapStation, and real-world throughput is engineered for the busiest network conditions: millions of traps per hour. Logs are optimized for speedy search results too.

Browser Screenshot: Histogram illustrating traps received per hour.  Range: [0 - 942,661]
Browser Screenshot: TrapStation handling an event storm at a large U.S. telco

Requirements

Client: Any modern web browser
Server*:

* Amounts for the TrapStation process. Other processes on your machine may require additional resources.

Demo

Please request a web meeting, for a few slides and a live demo. A free trial is available too.

More

Thanks for exploring TrapStation. Also consider its various use cases. Or see what customers are saying.

TrapEXPLODER is a registered trademark of Concord Communications, Inc. (acquired by CA Technologies).
TrapBlaster is a trademark of BMC Software, Inc.
Splunk is a registered trademark of Splunk Inc.