Understanding Behavior Models

Node

Represents either a workstation, server, or a network device, such as a router, hub, or bridge.

Property

A text string that describes the type of node or one of the node's MIB objects. Polls and alarms use properties to target specific nodes. Assigning a node to a property group that contains multiple properties allows the node to be targeted by multiple behavior models.

Poll

Periodically solicits SNMP values from the agents running on targeted nodes and fires a trigger when specified conditions are met. Polls can fire multiple triggers, which are detected by one or more alarms.

Trap mask

Detects a predefined type of SNMP trap. Trap masks can define generic and specific traps as well as traps coming from certain types of devices or whose contents match user-specified criteria. A trap mask fires a trigger when the specified type of trap is detected.

Alarm

Receives triggers, correlates one or more detected network events, and tracks each event instance. Alarms can include automated actions, which fall into four categories: notifying, logging, triggering other alarms, and correcting network conditions. Actions can also be performed conditionally using NerveCenter's Action Router.