Server Management - Systems Insight Manager
1832950 Members
2799 Online
110048 Solutions
New Discussion

Windows events handling via snmp traps (evntwin, evntcmd,...)

 
Pagnotta
Frequent Advisor

Windows events handling via snmp traps (evntwin, evntcmd,...)

Hi all,

I've seen several threads speaking about the subject, but no one really answers my question.

I fact, I'd like to retrieve events generated by the eventagent service on windows. I know that it can be configured to send snmp traps to a destination host via eventcmd (evntwin). I also know that the snmmp dialect used be the agent needs a special .mib file to be registred with SIM. I got this one from the following site

http://www.ehsco.com/reading/20050715.html

Now, I got some errors saying that the mib file cannot be compiled with the following message

...OBJECT IDENTIFIER: invalid registration .mib file cannot be compiled...

Can anyone help me understand and fix this ?

PS: I'm using SIM 5.0, windows 2000 et 2003 as managed hosts

Angelo
3 REPLIES 3
Pagnotta
Frequent Advisor

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)


Anyone can help with this ? Help will be really appreciated ?

Angelo
Pagnotta
Frequent Advisor

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)


I've modified the mib file written by Eric A. Hall in order to be able to compile it for SIM 5.0.

Thanks to Eric A.Hall who helped me find that sim5.0 doesn't support the kind of definition for OIDs with subids like

xy OBJECT IDENTIFIER ::= {parent 2 45 23} but only single IDs like

xy OBJECT IDENTIFIER ::= {parent 2}
xyx OBJECT IDENTIFIER ::= {xy 45}
xyxy OBJECT IDENTIFIER ::= {xyy 23}

There is one more problem with the number of subids that can be defined that way... it seems that there is 16 subids limit !?

can anyone know why and how this can be changed ?

Regards


Steve2006
New Member

Re: Windows events handling via snmp traps (evntwin, evntcmd,...)

Hi Angelo
I am suffering the exact same problem... Did you manage to get a .mib file to compile? If so can you enlighten me?

Thanks,

Steve