TECHZEN Zenoss User Community ARCHIVE  

Problem parsing SWIFT events

Subject: Problem parsing SWIFT events
Author: Nicolas Serrano
Posted: 2017-08-31 10:40

Hello, 

We are having problems interpreting SNMP alarms from the SWIFT platform.

I am attaching the wrong event interpretation and the SWIFT mib file. We had to change the MIB definition from "saatrap" to "SAA-TRAP-MIB" because it was in lowercase.

For example the "Message" and the "Event Details" are not being correctly parsed.

Their support said that their MIB file is correct and it must be some problem with our Zenoss configuration.

Can you help us with this problem?

Best regards.
Nicolás

Attachments:

error_mib_swift_(1).txt

saatrap.txt



Subject: RE: Problem parsing SWIFT events
Author: Jane Curry
Posted: 2017-09-01 06:19

So in your failed event detail, you have x.y.z in the enterprise fields - is that really what is there or are you substituting here because of privacy?
Also, in your event details, you show oid value of 1.1.1.1.1.1.x.y.z  - is this you substituting?

If you have imported the MIB into Zenoss, I would expect you to get the oid as something like 1.3.6.1.4.1.18494 (ie the SAA mib - there may be another .digit on the end), and I would expect the enterprise fields to have been trabslated into something like enterprises.swift.saa.

Looks like your MIB only has 2 traps in it, a heartbeat one and the main one where you have to delve into the varbinds of the TRAP to parse out useful details.  You might pull my Zenoss Event Management paper from https://www.skills-1st.co.uk/papers/jane/zenoss4-events/  and have a look at the sections on MIB and TRAP processing.

Cheers,
Jane

------------------------------
Jane Curry
Skills 1st United Kingdom
jane.curry@skills-1st.co.uk
------------------------------


Subject: RE: Problem parsing SWIFT events
Author: Nicolas Serrano
Posted: 2017-09-01 12:08

Hi Jane.

After reading your paper we did a "zentrap restart" and that made the trick!

Thank you for your help and time.
Best,
Nicolás


< Previous
ZENUP SP671 INCOMPLETE
  Next
Dashboard URLs
>