topic Windows Security MIBs in Server Management - Systems Insight Manager

Windows Security MIBs

David Frederiksen — Thu, 17 Jul 2008 22:00:10 GMT

Does anyone have MIBs for the Windows Server 2003 SP2 Failed Login traps?

Re: Windows Security MIBs

David Frederiksen — Fri, 18 Jul 2008 13:44:59 GMT

As my pervious post exposes, I am very new to the use of Insight Manager 5.2. To clarify my initial enquiry, which MIB will have the Failed Login information:
mib_ii.mib
wins.mib
?

Or, can anyone introduce me to how I can determine this on my own?

Re: Windows Security MIBs

Rob Buxton — Sat, 19 Jul 2008 00:04:23 GMT

What are you trying to do?
HPSIM reports on failed logins to itself, but that's an internally generated event it doesn't rely on a MIB.
If you're trying to use something like evntcmd to convert windows events to snmp and use HPSIM has a more generic snmp handling server then that's a separate issue.

I have seen a generic MIB that apparently handles windows events. You might want to search the forum - I've not tried using it myself.

Re: Windows Security MIBs

David Frederiksen — Sat, 19 Jul 2008 13:48:02 GMT

I am already trapping windows security events; however when they arrive in HPSIM they are generic. I have isolated all the MIBs on the server where the events are being trapped but I don't know which one to compile and register with HPSIM so the events no longer appear generic.

I am working towards using HPSIM to monitor more events so we have a single point of reference for event handling.

The hiearchy is pretty confusing.