topic Re: SNMP MIB for Windows 2000 Security logs in Server Management - Systems Insight Manager

SNMP MIB for Windows 2000 Security logs

Rob Trefz_1 — Tue, 01 Jun 2004 15:22:29 GMT

Hi-
I'm trying to get security log events on my servers to be sent to my HP insight manager servers. I am able to get the events, but I do not have a MIB set up to translate the events. Does anyone know where I can get a MIB file for Windows 2000 event logs? Also, how do I add this to the insight server? Thanks.

Re: SNMP MIB for Windows 2000 Security logs

Jon Ward — Tue, 01 Jun 2004 19:05:08 GMT

What are you doing to get those events?

Re: SNMP MIB for Windows 2000 Security logs

David Claypool — Tue, 01 Jun 2004 19:09:36 GMT

I'm guessing the MS tools EVNTWIN (GUI) or EVNTCMD (CLI). These let you select any registered event log message and trap on it via SNMP. I, too, would like to get my hands on a MIB that matches up with this...

Re: SNMP MIB for Windows 2000 Security logs

Rob Trefz_1 — Wed, 02 Jun 2004 09:07:02 GMT

I'm using evntwin.exe to send out the messages via snmp.

Re: SNMP MIB for Windows 2000 Security logs

Jon Ward — Wed, 02 Jun 2004 10:37:36 GMT

The best lead I could find is at http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=205062 .

Re: SNMP MIB for Windows 2000 Security logs

David Claypool — Wed, 02 Jun 2004 10:52:20 GMT

That's a good lead, but the MIB maps to their EV2T utility with the 2854 enterprise rather than to EVNTWIN and the Microsoft 311 enterprise. I suppose one could use the EV2T utility in place of EVNTWIN as it is a 'free' utility from http://www.ncomtech.com/download.htm

-------------------------------------
This is a not an endorsement of EV2T or an implied supportability by HP of this utility.

Re: SNMP MIB for Windows 2000 Security logs

Dan Robinson_4 — Thu, 03 Jun 2004 20:53:36 GMT

David, et all:
How do you add other MIBs to SIM41 and are there any specific requirements (Version, etc).

I dropped some MIB2s into the MIB dir on my SIM server and bounced the SIM Service, but they didnt show up via the web interface for custom MIBs.

Re: SNMP MIB for Windows 2000 Security logs

Jon Ward — Thu, 03 Jun 2004 21:03:11 GMT

Refer to page 153 in the help guide at http://www.hp.com/wwsolutions/misc/hpsim-helpfiles/sys-book.pdf . (This is page 177 in the PDF).