cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

SNMP Traps - referencing OIDs without knowing the Attribute name

Ed_Cox
Observer

Below is a sample log entry from SNMP:  I need to create an event extraction and include all the SMI Experimental variables.  The challenge is that the column/attribute names will change depending on the trap.   One time it may be

"SNMPv2-SMI::experimental.94.1.11.1.3.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": "129"
and next event  may be

"SNMPv2-SMI::experimental.94.1.11.1.3.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.80": "80"

Is there a "field" that will let me dump all the elements into the event extraction, regardless of the column name?

 

{
"event.type": "LOG",
"content": "SNMP trap (SNMPv2-SMI::enterprises.1139.3) reported from *.*.*.*\n",
"status": "NONE",
"timestamp": "1683220514287",
"device.address": "10.61.170.246",
"dt.entity.snmptraps:com_dynatrace_ext_snmp-traps": "CUSTOM_DEVICE-",
"log.source": "snmptraps",
"loglevel": "NONE",
"snmp.trap_oid": "SNMPv2-SMI::enterprises.1139.3",
"SNMPv2-SMI::enterprises.1139.3.8888.1.0": "2",
"SNMPv2-SMI::enterprises.1139.3.8888.2.0": "1207",
"SNMPv2-SMI::enterprises.1139.3.8888.3.0": "1043",
"SNMPv2-SMI::enterprises.1139.3.8888.4.0": "DG1_F_4",
"SNMPv2-SMI::experimental.94.1.11.1.3.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": "129",
"SNMPv2-SMI::experimental.94.1.11.1.6.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": "8",
"SNMPv2-SMI::experimental.94.1.11.1.7.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": "4",
"SNMPv2-SMI::experimental.94.1.11.1.8.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": ".0.0",
"SNMPv2-SMI::experimental.94.1.11.1.9.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0.129": "Symmetrix 000197600510 TPDataPool DG1_F_4 : Data Pool configuration has changed.",
"SNMPv2-SMI::experimental.94.1.6.1.20.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0": "000197600510",
"SNMPv2-SMI::experimental.94.1.6.1.3.80.6.4.130.241.201.63.128.0.0.0.0.0.0.0.0": "11",
"snmp.version": "1"
}

3 REPLIES 3

AntonioSousa
DynaMight Guru
DynaMight Guru

@Ed_Cox,

In my case, I have uploaded MIB files to the ActiveGates, and now I don't have OIDs, but their resolution name. Do you think it might help in your use-case?

Antonio Sousa

Thank you, Antonio...I THINK I'm going to use the OID Trim function to help with this situation.    

I would still like a way to have a index for a OID so that I can reference with a variable.   

 

copeca1012
Observer

Featured Posts