topic Re: Windows events handling via snmp traps (evntwin, evntcmd,...) in Server Management - Systems Insight Manager

Windows events handling via snmp traps (evntwin, evntcmd,...)

Pagnotta — Wed, 16 Nov 2005 04:02:36 GMT

Hi all,

I've seen several threads speaking about the subject, but no one really answers my question.

I fact, I'd like to retrieve events generated by the eventagent service on windows. I know that it can be configured to send snmp traps to a destination host via eventcmd (evntwin). I also know that the snmmp dialect used be the agent needs a special .mib file to be registred with SIM. I got this one from the following site

http://www.ehsco.com/reading/20050715.html

Now, I got some errors saying that the mib file cannot be compiled with the following message

...OBJECT IDENTIFIER: invalid registration .mib file cannot be compiled...

Can anyone help me understand and fix this ?

PS: I'm using SIM 5.0, windows 2000 et 2003 as managed hosts

Angelo

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)

Pagnotta — Fri, 18 Nov 2005 04:28:13 GMT

Anyone can help with this ? Help will be really appreciated ?

Angelo

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)

Pagnotta — Wed, 23 Nov 2005 10:26:00 GMT

I've modified the mib file written by Eric A. Hall in order to be able to compile it for SIM 5.0.

Thanks to Eric A.Hall who helped me find that sim5.0 doesn't support the kind of definition for OIDs with subids like

xy OBJECT IDENTIFIER ::= {parent 2 45 23} but only single IDs like

xy OBJECT IDENTIFIER ::= {parent 2}
xyx OBJECT IDENTIFIER ::= {xy 45}
xyxy OBJECT IDENTIFIER ::= {xyy 23}

There is one more problem with the number of subids that can be defined that way... it seems that there is 16 subids limit !?

can anyone know why and how this can be changed ?

Regards

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)

Steve2006 — Mon, 20 Feb 2006 13:20:10 GMT

Hi Angelo
I am suffering the exact same problem... Did you manage to get a .mib file to compile? If so can you enlighten me?

Thanks,

Steve