How do I get Alerts/Events configured in NFA to show up in CAPC as Events?

Document ID : KB000020347
Last Modified Date : 14/02/2018
Show Technical Document Details
  1. Configure Alerts based on various thresholds and filters in the "Adminstration->Alerts" page shown below.

    Figure 1

  2. In the NFA "Adminstration->Appplication Settings" page set the "Trap Destinations" field to the IP address of the NFA console and NOT the CAPC server.

    Figure 2

    The way this works is the Alerts are generated from NFA as Traps, and CAPC's Event Manger does not listen for Traps, but the NFA Console does. So the trap is redirected back to itself on the NFA Console and the then the events are pushed up to the CAPC server.

  3. Once traps start to be generated they will be logged in the NFA console server's 'TrapReceiverLog*.log' file, you can check here to verify traps are being sent.
  4. Verify the Threshold Alerts in NFA are now showing up as Threshold Events in CAPC's "Event Display" view.

    Figure 3