I am sending the trap and the receiver is expecting it to be in asn_ipaddress format
From sitescope the ip address I am passing (.220.127.116.11.4.1.11918.104.22.168 ) is received as an octetstring
test fan down
Where as if I do a manual SNMP trap using the following its received correctly as I expected.
/usr/bin/snmptrap -v 2c -c public mgmt.server.name:162 '' .22.214.171.124.4.1.11937.0.1 .126.96.36.199.4.1.119188.8.131.52.3.1 s "DEV/4/FAN_FAILED" .184.108.40.206.4.1.119220.127.116.11.3.2 s "testing " .18.104.22.168.4.1.11922.214.171.124 a 126.96.36.199
using Custom Log File Monitor, Run alerts: is set to For each log entry matched, Match value labels: value,value2,value3, without any code in DPS , and using SNMP Trap alerting (with SNMP Template), having the following lines on my log file
Jan 17 15:22:00 188.8.131.52 <189>38: Jan 2 15:55:15.788 UTC: %CDP-4-DUPLEX_MISMATCH: Message
Jan 17 15:22:00 184.108.40.206 <189>38: Jan 2 15:55:15.788 UTC: %CDP-4-DUPLEX_MISMATCH: Message1
I can see in the alert logs that Sitescope is concatenating the values when it triggers the alerting.