SNMP MIB for Windows 2000 Security logs

[Rob Trefz_1]

Hi-
I'm trying to get security log events on my servers to be sent to my HP insight manager servers. I am able to get the events, but I do not have a MIB set up to translate the events. Does anyone know where I can get a MIB file for Windows 2000 event logs? Also, how do I add this to the insight server? Thanks.

[Jon Ward]

What are you doing to get those events?

[David Claypool]

I'm guessing the MS tools EVNTWIN (GUI) or EVNTCMD (CLI). These let you select any registered event log message and trap on it via SNMP. I, too, would like to get my hands on a MIB that matches up with this...

[Rob Trefz_1]

I'm using evntwin.exe to send out the messages via snmp.

[Jon Ward]

The best lead I could find is at http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=205062 .

[David Claypool]

That's a good lead, but the MIB maps to their EV2T utility with the 2854 enterprise rather than to EVNTWIN and the Microsoft 311 enterprise. I suppose one could use the EV2T utility in place of EVNTWIN as it is a 'free' utility from http://www.ncomtech.com/download.htm


-------------------------------------
This is a not an endorsement of EV2T or an implied supportability by HP of this utility.

[Dan Robinson_4]

David, et all:
How do you add other MIBs to SIM41 and are there any specific requirements (Version, etc).

I dropped some MIB2s into the MIB dir on my SIM server and bounced the SIM Service, but they didnt show up via the web interface for custom MIBs.

[Jon Ward]

Refer to page 153 in the help guide at http://www.hp.com/wwsolutions/misc/hpsim-helpfiles/sys-book.pdf . (This is page 177 in the PDF).