Unsolved
This post is more than 5 years old
4 Posts
0
6560
MIB Import of Windows Security Events
Has there been an answer as to how we can import custom SNMP events that have an Enterprise OID longer than 128? I desperately need to get this functional to monitor Windows New Account Creation EventID:4720 as well as other security related events
http://en.community.dell.com/techcenter/systems-management/f/4494/t/19490591
DELL-Shivendra K
685 Posts
0
March 12th, 2017 21:00
Hi, thanks for following up on older thread.
With OME v2.2, Enterprise OID field limit has been increased considerably. You should be able to define those traps from Windows security.
Please Note: MIB Import functionality, which used to be part of a separate tool earlier, is integrated within OME console of v2.2.
AlaFen
4 Posts
0
March 13th, 2017 13:00
AlaFen
4 Posts
1
March 13th, 2017 13:00
After upgrading to OME 2.2.0.1 (including Hotfix) I am still not get the Unknown alerts to link up to the Imported Alert definition.
the Import utility is truncating the OID:
Original OID: .1.3.6.1.4.1.311.1.13.1.35.77.105.99.114.111.115.111.102.116.45.87.105.110.100.111.119.115.45.83.101.99.117.114.105.116.121.45.65.117.100.105.116.105.110.103
Trap Ids:Generic:6 Specific:4720;
Imported OID:
.1.3.6.1.4.1.311.1.13.1.35.77.105.99.114.111.115.111.102.116.45.87.105.110.100.111.119.115.45.83.101.99.117.114.105.116.121.45.6
AlaFen
4 Posts
0
March 13th, 2017 13:00
It appears that it automatically truncates the OID at 128 chars.
DELL-Shivendra K
685 Posts
0
March 14th, 2017 07:00
Thanks for providing more information on this.
We have analysed this further, looks like another issue has been uncovered. We are in process of deciding what best can be done at this point. We will keep you posted.