Windows Security MIBs

[David Frederiksen]

Does anyone have MIBs for the Windows Server 2003 SP2 Failed Login traps?

[David Frederiksen]

As my pervious post exposes, I am very new to the use of Insight Manager 5.2. To clarify my initial enquiry, which MIB will have the Failed Login information:
mib_ii.mib
wins.mib
?

Or, can anyone introduce me to how I can determine this on my own?

[Rob Buxton]

What are you trying to do?
HPSIM reports on failed logins to itself, but that's an internally generated event it doesn't rely on a MIB.
If you're trying to use something like evntcmd to convert windows events to snmp and use HPSIM has a more generic snmp handling server then that's a separate issue.

I have seen a generic MIB that apparently handles windows events. You might want to search the forum - I've not tried using it myself.

[David Frederiksen]

I am already trapping windows security events; however when they arrive in HPSIM they are generic. I have isolated all the MIBs on the server where the events are being trapped but I don't know which one to compile and register with HPSIM so the events no longer appear generic.

I am working towards using HPSIM to monitor more events so we have a single point of reference for event handling.

The hiearchy is pretty confusing.