1. Perl through a program called sec.
2. Jun 16 10:02:23 q2 snmptt[0]: .1.3.6.1.6.3.1.1.5.4 Normal "Status Events" hq-cisco - A linkDown trap signifies that the SNMP entity, acting in 9 Tunnel1 tunnel Tunnel Down

What I am currently using

snmptt.*(Normal|INFORMATIONAL|MINOR|WARNING|SEVERE|MAJOR|CRITICAL) \  \"Status Events\" (\w+) \- (.*)

But it's not seeming to pick up.