Table Of Contents
Related Features and Technologies
Supported Standards, MIBs, and RFCs
Monitoring and Maintaining the Event MIB
Setting The Trigger in the Trigger Table
Creating an Event in the Event Table
Setting The Trigger Threshold in the Trigger Table
Appendix: Draft of Disman-Event-MIB
Event MIB Support
This feature module describes the addition of Event MIB Support for Simple Network Management Protocol (SNMP) in Cisco IOS Release 12.1(3)T and Cisco IOS Release 12.0(12)S. It includes information on the benefits of the new feature, supported platforms, supported standards, and new Cisco IOS commands that can be used to monitor Event MIB activity.
Release Modification12.1(3)T, 12.0(12)S
This feature was introduced.
12.2 (4)T
Event MIB Persistence was introduced.
The Event MIB was made compliant with RFC 2981
12.2 (4)T3
Support for this feature was added for the Cisco 7500 series
Feature History for Event MIB Support
This document includes the following sections:
•
Supported Standards, MIBs, and RFCs
•
Monitoring and Maintaining the Event MIB
•
Appendix: Draft of Disman-Event-MIB
Feature Overview
The Event MIB provides the ability to monitor Management Information Base (MIB) objects on a local or remote system using SNMP and initiate simple actions whenever a trigger condition is met (for example, an SNMP trap can be generated when an object is modified). When notifications are triggered by events, the Network Management System (NMS) does not need to constantly poll managed devices to find out if something has changed.
When combined with the Expression MIB support introduced in Cisco IOS Release 12.0(5)T, Event MIB support in Cisco IOS software provides a flexible and efficient way to monitor complex conditions on network devices.
Note
The implementation of the Event MIB for Cisco IOS Release 12.1(3)T and 12.0(12)S is based on a Draft version of the MIB. For implementation details of this draft, see draft-ietf-disman-event-mib-10.txt file in the "Appendix: Draft of Disman-Event-MIB" section of this document.
Benefits
By allowing SNMP notifications to take place only when a specified condition is met, Event MIB support reduces the load on affected devices, significantly improving the scalability of network management solutions.
Restrictions
The Event MIB can be made to monitor any MIB object. However, the type of sampling dictates the types of objects that can be monitored.
Event MIB configuration is done with applications external to Cisco IOS software. One method for performing network monitoring of Event MIB conditions is to use a workstation to perform SNMP Gets and Sets on the SNMP agent running on the routing device. Another method is to use the functionality built in to a network management application (typically a GUI-based program running on a dedicated computer) which is compatible with Cisco IOS software.
Related Features and Technologies
•
SNMP
•
Internet-Draft Distributed Management (Disman) Expression MIB [draft-ietf-disman-event-mib-10.txt]
Related Documents
For SNMP configuration information using Cisco IOS software, see the "Configuring SNMP Support" chapter of the Release 12.1 Cisco IOS Configuration Fundamentals Configuration Guide and the "SNMP Commands" chapter of the Release 12.1 Cisco IOS Configuration Fundamentals Command Reference.
For information on utilizing SNMP MIB features, see the appropriate documentation for your network management system.
For updates on the implementation of MIBs, see the Cisco.com MIB website at
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
Supported Platforms
The Event MIB is supported on the following platforms in Cisco IOS release 12.1(3)T:
•
Cisco 2500 series (Cisco 2501-2525)
•
Cisco 3600 series (Cisco 3620, 3640, 3660)
•
Cisco MC3810 Multiservice Concentrator
•
Cisco 4000 series (Cisco 4500-m, 4700, 4700-m)
•
Cisco AS5200 series
•
Cisco AS5300 series
•
Cisco AS5400 series
•
Cisco AS5800 series
•
Cisco 7100 series
•
Cisco 7200 series
•
Cisco RSP7000/7500 series
•
Cisco Route Processor Module (RPM) platforms (Cisco MGX 8850)
The Event MIB is supported on the following platforms in Cisco IOS release 12.0(12)S:
•
Cisco 7200 series
•
Cisco RSP 7000/7500 series
•
Cisco 12000 GSR series
Supported Standards, MIBs, and RFCs
Standards
No new or modiried standards are supported by this feature.
MIBs
This feature introduces the Event MIB.
The EVENT-MIB.my file can be downloaded from the Cisco MIB web site on CCO at http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
RFCs
At the time of the release of Cisco IOS Version 12.1(3)T (July 2000), the "Event MIB" is an "Internet Draft" and has not yet been given an RFC classification by the Internet Engineering Task Force (IETF).
Prerequisites
Use of the Event MIB as described in this feature module assumes that you have configured SNMP on your routing devices and are using the SNMP features of an external network management tool (such as the UNIX-based SNMP ultility) or NMS (such as CiscoWorks2000).
Understanding the Event MIB
The Event MIB allows a user or NMS to watch over specified objects and set event triggers based on existence, threshold and boolean tests. An event occurs when a trigger is fired; this means that a specified test on an object returns a value of "true". To create a trigger, a user or NMS configures a trigger entry in the mteTriggerTable of the Event MIB. This trigger entry specifies the object identifier (OID) of the object to be watched. For each trigger entry type (existence, theshold, and boolean triggers), corresponding tables (existence, threshold, and boolean tables) are populated with the information required for carrying out the test. The MIB can be configured so that when triggers are activated (fired), either an SNMP Set is performed, a notification is sent out to the interested host, or both.
Wildcarding is a powerful functionality provided by the Event MIB which allows you to monitor multiple instances of an object. You can specify a single OID for monitoring, or use wildcarding to specify a group of OIDs.
There are nine tables in the Event MIB. They are:
•
mteTriggerTable
•
mteTriggerDeltaTable
•
mteTriggerExistenceTable
•
mteTriggerBooleanTable
•
mteTriggerThresholdTable
•
mteObjectsTable
•
mteEventTable
•
mteEventNotificationTable
•
mteEventSetTable
The trigger entry is set in the trigger table. Each trigger is configured to watch a single object or a group of objects specified by a wildcard (*). The object-type can be any one of the types given below:
•
INTEGER_TYPE
•
OCTET_PRIM_TYPE
•
NULL_TYPE
•
OBJECT_ID_TYPE
•
SEQUENCE_TYPE
•
INTEGER_32_TYPE
•
IP_ADDR_PRIM_TYPE
•
COUNTER_TYPE
•
GAUGE_TYPE
•
TIME_TICKS_TYPE
•
OPAQUE_PRIM_TYPE
•
COUNTER_32_TYPE
•
GAUGE_32_TYPE
•
UNSIGNED32_TYPE
•
COUNTER_64_TYPE
The Event MIB process checks the state of this watched object at predefined intervals. The interval can be configured through the mteTriggerFrequency object. The type of sampling that can be done on an object is of two types:
•
Absolute
•
Delta
The test that can be done on the watched object is one or a combination of the following:
•
Existence
•
Boolean
•
Threshold
For each of the above tests the mteTrigger<Exist/Bool/Threshold>Startup can be true or false to indicate whether the trigger should be fired as soon as it is activated or not.
The Existence Test can be one or a combination of the following:
•
Absent
•
Present
•
Changed
The Boolean test can be one of the following:
•
Unequal
•
Equal
•
Less
•
LessOrEqual
•
Greater
•
GreaterOrEqual
The Threshold test can be one of the following:
•
Rising
•
Falling
•
Rising or Falling
The Event Table has an entry for what type of action to take for the event. This could one or both of the following:
•
Notifications (Traps/Informs)
•
Sets
The Notification Table contains a list of objects corresponding to an entry in the Event Table. This list of objects is added to the notification sent out when the trigger fires.
The Set Table may contain an object for each event defined in the Event Table. When the trigger fires this object is set to the value specified in the table.
Configuration Tasks
There are no Cisco IOS software configuration tasks associated with the Event MIB. The "Configuration Examples" section gives a sample configuration session using a network management application on an external device. See the "Related Documents" section for information on configuring SNMP on your Cisco routing device.
Monitoring and Maintaining the Event MIB
Use the following commands to monitor Event MIB activity from the Cisco IOS command-line interface:
Configuration Examples
All configuration of Event MIB functionality must be performed though applications using SNMP. The following example provides a step-by-step Event MIB configuration using SNMP research tools available for Sun workstations. The "Setany" commands given below are executed using the SNMP application. Note that these commands are not Cisco IOS CLI commands. This example assumes that SNMP has been configured on your routing device.
In this example, the objective is to monitor ifInOctets for all interfaces. The Event MIB is configured to monitor the delta values of ifInOctets for all interfaces once per minute. If any of the samples exceed the specified threshold of 30, a Trap notification will be sent.
There are four parts to the following example:
•
Setting The Trigger in the Trigger Table
•
Creating an Event in the Event Table
•
Setting The Trigger Threshold in the Trigger Table
Setting The Trigger in the Trigger Table
Creating an Event in the Event Table
Setting The Trigger Threshold in the Trigger Table
Activating the Trigger
Command PurposeStep 1
setany -v2c $ADDRESS private mteTriggerEntryStatus.4.106.111.104.110.1 -i 1
Makes the trigger active.
To confirm the above configuration is working, ensure that at least one of the interfaces gets more than 30 packets in a minute. This should cause a trap to be sent out after one minute.
Command Reference
This section documents new commands. All other Cisco IOS commands used with this feature are documented in the Release 12.1 Cisco IOS Configuration Fundamentals Command Reference publication. The following commands are documented:
show management event
To display the SNMP Event values that have been configured on your routing device through the use of the Event MIB, use the show management event command in privileged EXEC mode.
show management event
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
For information on Event MIB functionality, read the EVENT-MIB.my file on your routing device, or download the file from the Cisco MIB website on CCO at http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml .
Examples
The following example shows sample output of the show management event command:
Router# show management eventMgmt Triggers:(1): Owner: aseem(1): 01, Comment: TestEvent, Sample: Abs, Freq: 120Test: Existence Threshold BooleanObjectOwner: aseem, Object: sethiOID: ifEntry.10.3, Enabled 1, Row Status 1Existence Entry: , Absent, ChangedStartUp: Present, AbsentObjOwn: , Obj: , EveOwn: aseem, Eve: 09Boolean Entry:Value: 10, Cmp: 1, Start: 1ObjOwn: , Obj: , EveOwn: aseem, Eve: 09Threshold Entry:Rising: 50000, Falling: 20000ObjOwn: ase, Obj: 01 RisEveOwn: ase, RisEve: 09 , FallEveOwn: ase, FallEve: 09Delta Value Table:(0): Thresh: Rising, Exis: 1, Read: 0, OID: ifEntry.10.3 , val: 69356097Mgmt Events:(1): Owner: aseem(1)Name: 09 , Comment: , Action: Set, Notify, Enabled: 1 Status: 1Notification Entry:ObjOwn: , Obj: , OID: ifEntry.10.1Set:OID: ciscoSyslogMIB.1.2.1.0, SetValue: 199, Wildcard: 2 TAG: , ContextName:Object Table:(1): Owner: aseem(1)Name: sethi, Index: 1, OID: ifEntry.10.1, Wild: 1, Status: 1debug management event
To monitor the activities of the Event MIB in real time on your routing device, use the debug management event command in privileged EXEC mode. To stop output of debug messages to your screen, use the no form of this command.
debug management event
no debug management event
Syntax Description
This command has no arguments or keywords.
Defaults
Debugging output is disabled by default.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The debug management event command prints messages to the screen whenever the Event MIB evaluates a specified trigger. These messages are are given in real-time, and are intendended to be used by technical support engineers for troubleshooting purposes.
Examples
The following example shows sample output for this command:
Router# debug management eventEvent Process Bool: Owner aseem, Trigger 01Event Bool process: invoke eventEvent Bool process: no wildcardingEvent: OID ifEntry.10.3Event getValue abs: 69847284Event Bool process: Trigger Fired !mteSetNotifyObjects:Event execOnFiring: sending notificationEvent: OID ifEntry.10.1Event add_objects: Owner , TriggerEvent add_objects: Owner aseem, Trigger sethiEvent Found Owner: aseemEvent Found Name: sethiEvent: OID ifEntry.10.1Event: sending trap with 7 OIDsEvent: OID mteHotTrigger.0Event: OID mteHotTargetName.0Event: OID mteHotContextName.0Event: OID ifEntry.10.3Event: OID mteHotValue.0Event: OID ifEntry.10.1Event: OID ifEntry.10.1Event mteDoSets: setting oidEvent mteDoSets: non-wildcarded oidEvent: OID ciscoSyslogMIB.1.2.1.0Event Thresh Process: Owner aseem, Trigger 01Event Thresh process: invoke rising eventEvent Thresh process: invoke falling eventEvent Thresh process: no wildcardingEvent: OID ifEntry.10.3Event getValue abs: 69847284Event Existence Process: Owner aseem, Trigger 01Event Exist process: invoke eventEvent Exist process: no wildcardingEvent: OID ifEntry.10.3Event getValue abs: 69847284Event Check ExistTrigger for AbsentEvent Check ExistTrigger for ChangedRouter# no debug management eventGlossary
IETF—Internet Engineering Task Force. The IETF is the body (supervised by the Internet Architecture Board) that defines Internet operating standards such as SNMP MIBs, and publishes RFCs for use by the Internet community. The IETF's web site address is http://www.ietf.org.
MIB---Management Information Base. The MIBs referred to in this document are MIB modules. These modules contain definitions of management information for use by SNMP network management systems.
OID—Object Identifier. The values for OIDs are defined in specific MIB modules.
NMS—Network Management System. An application or suite of applications designed to monitor networks using SNMP. CiscoView is one example of an NMS.
SNMP—Simple Network Management Protocol. Network management protocol used almost exclusively in TCP/IP networks. SNMP provides a means to monitor and control network devices, and to manage configurations, statistics collection, performance, and security.
Appendix: Draft of Disman-Event-MIB
Expires 7 December 2000
Network Working Group Editor of this version:Internet-Draft Ramanathan R. KavasseriExpires December 2000 Cisco Systems, Inc.Author of previous version:Bob Stewart7 June 2000Event MIBdraft-ietf-disman-event-mib-10.txtStatus of this MemoThis document is an Internet-Draft and is in full conformance with allprovisions of Section 10 of RFC2026.Internet-Drafts are working documents of the Internet Engineering TaskForce (IETF), its areas, and its working groups. Note that other groupsmay also distribute working documents as Internet-Drafts.Internet-Drafts are draft documents valid for a maximum of six monthsand may be updated, replaced, or obsoleted by other documents at anytime. It is inappropriate to use Internet- Drafts as reference materialor to cite them other than as ``work in progress.''The list of current Internet-Drafts can be accessed athttp://www.ietf.org/ietf/1id-abstracts.txtThe list of Internet-Draft Shadow Directories can be accessed athttp://www.ietf.org/shadow.html.Distribution of this document is unlimited. Please send comments to theDistributed Management Working Group, <disman@dorothy.BMC.com>.Copyright NoticeCopyright (C) The Internet Society (2000). All Rights Reserved.Internet Draft Distributed Management Event MIB 7 June 20001. AbstractThis memo defines an experimental portion of the Management InformationBase (MIB) for use with network management protocols in the Internetcommunity. In particular, it describes managed objects that can be usedto manage and monitor MIB objects and take action through events.The Event MIB provides the ability to monitor MIB objects on the localsystem or on a remote system and take simple action when a triggercondition is met.The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT","SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in thisdocument are to be interpreted as described in RFC 2119.2. The SNMP Management FrameworkThe SNMP Management Framework presently consists of five majorcomponents:o An overall architecture, described in RFC 2571 [RFC2571].o Mechanisms for describing and naming objects and events for thepurpose of management. The first version of this Structure ofManagement Information (SMI) is called SMIv1 and described inSTD 16, RFC 1155 [RFC1155], STD 16, RFC 1212 [RFC1212] and RFC1215 [RFC1215]. The second version, called SMIv2, is describedin STD 58, RFC 2578 [RFC2578], RFC 2579 [RFC2579] and RFC 2580[RFC2580].o Message protocols for transferring management information. Thefirst version of the SNMP message protocol is called SNMPv1 anddescribed in STD 15, RFC 1157 [RFC1157]. A second version of theSNMP message protocol, which is not an Internet standards trackprotocol, is called SNMPv2c and described in RFC 1901 [RFC1901]and RFC 1906 [RFC1906]. The third version of the messageprotocol is called SNMPv3 and described in RFC 1906 [RFC1906],RFC 2572 [RFC2572] and RFC 2574 [RFC2574].o Protocol operations for accessing management information. Thefirst set of protocol operations and associated PDU formats isdescribed in STD 15, RFC 1157 [RFC1157]. A second set ofprotocol operations and associated PDU formats is described inExpires 7 December 2000 [Page 2]Internet Draft Distributed Management Event MIB 7 June 2000RFC 1905 [RFC1905].o A set of fundamental applications described in RFC 2573[RFC2573] and the view-based access control mechanism describedin RFC 2575 [RFC2575].A more detailed introduction to the current SNMP Management Frameworkcan be found in RFC 2570 [RFC2570].Managed objects are accessed via a virtual information store, termedthe Management Information Base or MIB. Objects in the MIB aredefined using the mechanisms defined in the SMI.This memo specifies a MIB module that is compliant to the SMIv2. AMIB conforming to the SMIv1 can be produced through the appropriatetranslations. The resulting translated MIB must be semanticallyequivalent, except where objects or events are omitted because notranslation is possible (use of Counter64). Some machine readableinformation in SMIv2 will be converted into textual descriptions inSMIv1 during the translation process. However, this loss of machinereadable information is not considered to change the semantics of theMIB. It may not be possible to meaningfully monitor Counter64 objectsusing an SMIv1 version of the MIB.Expires 7 December 2000 [Page 3]Internet Draft Distributed Management Event MIB 7 June 20003. OverviewWith network sizes well beyond the ability of people to manage themdirectly, automated, distributed management is vital. An importantaspect of such management is the ability of a system to monitor itselfor for some other system to monitor it.The Event MIB provides the ability to monitor MIB objects on the localsystem or on a remote system and take simple action when a triggercondition is met.The MIB is intended to suit either a relatively powerful manager or mid-level manager, as well as a somewhat more limited self-managing system.4. Relationship to Other MIBsThe Event MIB is based on extensive experience with the RMON MIB[RFC1757] and provides a superset of the capabilities of the RMON alarmand event groups. Conceptually, the key extension is the ability toallow alarms to be generated for MIB objects that are on another networkelement. The Event MIB calls "triggers" what the RMON MIB called"alarms," but the concepts are the same. Event MIB triggers maintainthe RMON handling of thresholds and add the concept of booleans. EventMIB events maintain the RMON concept of sending an SNMP notification inresponse to a trigger and add the concept of setting a MIB object.The Event MIB is the successor and update to SNMPv2's Manager-to-ManagerMIB [RFC1451] which was declared Historic pending this work.The Event MIB depends on the services of the SNMPv3 Management Targetand Notification MIBs [RFC2573].The Event MIB is nicely complemented by the Distributed ManagementExpression MIB [RFCExpressionMIB], which is the expected source ofboolean objects to monitor. Note that there is considerable overlapbetween the wildcard and delta sample capabilities of the Event andExpression MIBs. A carefully-planned implementation might well usecommon code to provide the overlapping functions.5. MIB SectionsThe MIB has four sections: triggers, objects, events, and notifications.Triggers define the conditions that lead to events. Events may causeExpires 7 December 2000 [Page 4]Internet Draft Distributed Management Event MIB 7 June 2000notifications.The trigger table lists what objects are to be monitored and how andrelates each trigger to an event. It has supplementary, companiontables for additional objects that depend on the type of test done forthe trigger.The objects table lists objects that can be added to notifications basedon the trigger, the trigger test type, or the event that resulted in thenotification.The event table defines what happens when an event is triggered: sendinga notification, setting a MIB object or both. It has supplementary,companion tables for additional objects that depend on the action taken.The notification section defines a set of generic notifications to gowith the events and for Event MIB error handling, and it defines a setof objects to put in those notifications.Expires 7 December 2000 [Page 5]Internet Draft Distributed Management Event MIB 7 June 2000The following diagram describes the relationships between the tablesin the Event MIB.+-----------------------------+| mteTriggerEntry | subclassed by:| { mteOwner, |---+| IMPLIED mteTriggerName } | +-- mteTriggerDeltaEntry| | || | +-- mteTriggerExistenceEntry| | || | +-- mteTriggerBooleanEntry| | || | +-- mteTriggerThresholdEntry| || mteTrigger*Event -------------------------------->+| | || mteTriggerObjects ------------------>+ |+-----------------------------+ | || |+-----------------------------+ V || mteObjectsEntry | | || { mteOwner, |<-------------+ || mteObjectsName, | || mteObjectsIndex } | |+-----------------------------+ |V+---------------------------+ || mteEventEntry |<----------------------------+| { mteOwner, || IMPLIED mteEventName } || || mteEventAction---> + (condition)+---------------------------+ |V+---------------------------+ | +---------------------------+| mteEventNotificationEntry | | | mteEventSetEntry || { mteOwner, |<--+-->| { mteOwner, || IMPLIED mteEventName } | | IMPLIED mteEventName } |+---------------------------+ +---------------------------+Expires 7 December 2000 [Page 6]Internet Draft Distributed Management Event MIB 7 June 20006. OperationThe Event MIB is instrumentation for a distributed managementapplication that monitors MIB objects. In its simplest form thisapplication monitors individual, local MIB objects, just as an RMONprobe fulfills the functions implied by RMON's alarm and eventoperation. Additionally the application can monitor remote objects andwildcarded groups of objects.Remote monitoring uses the tag service of the Management Target MIB[RFC2573] to select and access remote systems as an ordinary SNMP-basedmanagement application. Local monitoring may be via a more intimate,local interface which may, for example, bypass SNMP encoding butotherwise is functionally identical to remote SNMP operation, includingthe application of access control. A self-management only system MAYnot implement remote monitoring.Wildcards indicate that the application SHOULD use a GetNext-typeoperation to find the zero or more instances implied by a truncatedobject identifier, just like an ordinary SNMP-based managementapplication. Each instance of a wildcard is treated as if it were aseparate entry, that is the instances of a wildcarded object areindependent of one another. For example, a wild-carded object maytrigger an event, and result in the setting of another wildcardedobject. The instance that satisfied the trigger function is used toperform the set function. All of this takes place independently of anyadditional instances that may fill the wildcard.Error handling is by notification. These error notifications SHOULD beenabled only for the diagnosis of problems indicated by error counters.If minimizing the probability of notification loss is a concern theySHOULD be transmitted as Inform PDUs as described in the [SNMP-TARGET-MIB] or directed to a log as described in the Notification Log MIB[rfcNotificationLogMIB]. Note that this does not mean the NotificationLog MIB is REQUIRED, since in fact notifications usually are not lost,but that the Notification Log MIB can be helpful with this as well asother MIBs that include notifications.Although like most MIBs this one has no explicit controls for thepersistence of the values set in configuring events, a robust, politeimplementation would certainly not force its managing applications toreconfigure it whenever it resets.Again, as with most MIBs, it is implementation-specific how a systemprovides and manages such persistence. To speculate, one could imagine,Expires 7 December 2000 [Page 7]Internet Draft Distributed Management Event MIB 7 June 2000for example, that persistence depended on the context in which theexpression was configured, or perhaps system-specific characteristics ofthe expression's owner. Or perhaps everything in a MIB such as thisone, which is clearly aimed at persistent configuration, isautomatically part of a system's other persistent configuration.7. SecuritySecurity of Event MIB entries depends on SNMPv3 access control for theentire MIB or for subsets based on entry owner names.Security of monitored objects for remote access depends on theManagement Target MIB [RFC2573]. Security for local access can dependon the Management Target MIB or on recording appropriate securitycredentials of the creator of an entry and using those to access thelocal objects. These security credentials are the parameters necessaryas inputs to isAccessAllowed from the Architecture for Describing SNMPManagement Frameworks. When accessing local objects without using alocal target tag, the system MUST (conceptually) use isAccessAllowed toensure that it does not violate security.To facilitate the provisioning of access control by a securityadministrator for this MIB itself using the View-Based Access ControlModel (VACM) defined in RFC 2275 [RFC2575] for tables in which multipleusers may need to independently create or modify entries, the initialindex is used as an "owner index". Such an initial index has a syntax ofSnmpAdminString, and can thus be trivially mapped to a securityName orgroupName as defined in VACM, in accordance with a security policy.If a security administrator were to employ such an approach, all entriesin related tables belonging to a particular user will have the samevalue for this initial index. For a given user's entries in aparticular table, the object identifiers for the information in theseentries will have the same sub-identifiers (except for the "column" sub-identifier) up to the end of the encoded owner index. To configure VACMto permit access to this portion of the table, one would createvacmViewTreeFamilyTable entries with the value ofvacmViewTreeFamilySubtree including the owner index portion, andvacmViewTreeFamilyMask "wildcarding" the column sub-identifier. Moreelaborate configurations are possible.Expires 7 December 2000 [Page 8]Internet Draft Distributed Management Event MIB 7 June 20008. DefinitionsDISMAN-EVENT-MIB DEFINITIONS ::= BEGINIMPORTSMODULE-IDENTITY, OBJECT-TYPE,Integer32, Unsigned32,NOTIFICATION-TYPE, Counter32,Gauge32, mib-2, zeroDotZero FROM SNMPv2-SMITEXTUAL-CONVENTION, RowStatus,TruthValue FROM SNMPv2-TCMODULE-COMPLIANCE, OBJECT-GROUP,NOTIFICATION-GROUP FROM SNMPv2-CONFsysUpTime FROM SNMPv2-MIBSnmpTagValue FROM SNMP-TARGET-MIBSnmpAdminString FROM SNMP-FRAMEWORK-MIB;dismanEventMIB MODULE-IDENTITYLAST-UPDATED "200006070000Z" -- 7 June 2000ORGANIZATION "IETF Distributed Management Working Group"CONTACT-INFO "Ramanathan KavasseriCisco Systems, Inc.170 West Tasman Drive,San Jose CA 95134-1706.Phone: +1 408 526 4527Email: ramk@cisco.com"DESCRIPTION"The MIB module for defining event triggers and actionsfor network management purposes."-- Revision HistoryREVISION "200006070000Z" -- 7 June 2000DESCRIPTION "This is the initial version of this MIB.Published as RFC xxxx"::= { mib-2 xx } -- final assignment by IANA at publication timedismanEventMIBObjects OBJECT IDENTIFIER ::= { dismanEventMIB 1 }-- Management Triggered Event (MTE) objectsmteResource OBJECT IDENTIFIER ::= { dismanEventMIBObjects 1 }mteTrigger OBJECT IDENTIFIER ::= { dismanEventMIBObjects 2 }mteObjects OBJECT IDENTIFIER ::= { dismanEventMIBObjects 3 }mteEvent OBJECT IDENTIFIER ::= { dismanEventMIBObjects 4 }Expires 7 December 2000 [Page 9]Internet Draft Distributed Management Event MIB 7 June 2000---- Textual Conventions--FailureReason ::= TEXTUAL-CONVENTIONSTATUS currentDESCRIPTION"Reasons for failures in an attempt to perform a managementrequest.The first group of errors, numbered less than 0, are relatedto problems in sending the request. The existence of aparticular error code here does not imply that allimplementations are capable of sensing that error andreturning that code.The second group, numbered greater than 0, are copieddirectly from SNMP protocol operations and are intended tocarry exactly the meanings defined for the protocol as returnedin an SNMP response.localResourceLack some local resource such as memory lackingor mteResourceSampleInstanceMaximumexceededbadDestination unrecognized domain name or otherwiseinvalid destination addressdestinationUnreachable can't get to destination addressnoResponse no response to SNMP requestbadType the data syntax of a retrieved objectas not as expectedsampleOverrun another sample attempt occurred beforethe previous one completed"SYNTAX INTEGER { localResourceLack(-1),badDestination(-2),destinationUnreachable(-3),noResponse(-4),badType(-5),sampleOverrun(-6),noError(0),tooBig(1),noSuchName(2),badValue(3),Expires 7 December 2000 [Page 10]Internet Draft Distributed Management Event MIB 7 June 2000readOnly(4),genErr(5),noAccess(6),wrongType(7),wrongLength(8),wrongEncoding(9),wrongValue(10),noCreation(11),inconsistentValue(12),resourceUnavailable(13),commitFailed(14),undoFailed(15),authorizationError(16),notWritable(17),inconsistentName(18) }---- Resource Control Section--mteResourceSampleMinimum OBJECT-TYPESYNTAX Integer32 (1..2147483647)UNITS "seconds"MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The minimum mteTriggerFrequency this system willaccept. A system may use the larger values of this minimum tolessen the impact of constant sampling. For largersampling intervals the system samples less often andsuffers less overhead. This object provides a way to enforcesuch lower overhead for all triggers created after it isset.Unless explicitly resource limited, a system's value forthis object SHOULD be 1, allowing as small as a 1 secondinterval for ongoing trigger sampling.Changing this value will not invalidate an existing settingof mteTriggerFrequency."::= { mteResource 1 }mteResourceSampleInstanceMaximum OBJECT-TYPESYNTAX Unsigned32UNITS "instances"MAX-ACCESS read-writeExpires 7 December 2000 [Page 11]Internet Draft Distributed Management Event MIB 7 June 2000STATUS currentDESCRIPTION"The maximum number of instance entries this system willsupport for sampling.These are the entries that maintain state, one for eachinstance of each sampled object as selected bymteTriggerValueID. Note that wildcarded objects resultin multiple instances of this state.A value of 0 indicates no preset limit, that is, the limitis dynamic based on system operation and resources.Unless explicitly resource limited, a system's value forthis object SHOULD be 0.Changing this value will not eliminate or inhibit existingsample state but could prevent allocation of additional stateinformation."::= { mteResource 2 }mteResourceSampleInstances OBJECT-TYPESYNTAX Gauge32UNITS "instances"MAX-ACCESS read-onlySTATUS currentDESCRIPTION"The number of currently active instance entries asdefined for mteResourceSampleInstanceMaximum."::= { mteResource 3 }mteResourceSampleInstancesHigh OBJECT-TYPESYNTAX Gauge32UNITS "instances"MAX-ACCESS read-onlySTATUS currentDESCRIPTION"The highest value of mteResourceSampleInstances that hasoccurred since initialization of the management system."::= { mteResource 4 }mteResourceSampleInstanceLacks OBJECT-TYPESYNTAX Counter32UNITS "instances"MAX-ACCESS read-onlyExpires 7 December 2000 [Page 12]Internet Draft Distributed Management Event MIB 7 June 2000STATUS currentDESCRIPTION"The number of times this system could not take a new samplebecause that allocation would have exceeded the limit set bymteResourceSampleInstanceMaximum."::= { mteResource 5 }---- Trigger Section---- CountersmteTriggerFailures OBJECT-TYPESYNTAX Counter32UNITS "failures"MAX-ACCESS read-onlySTATUS currentDESCRIPTION"The number of times an attempt to check for a triggercondition has failed. This counts individually for eachattempt in a group of targets or each attempt for awildcarded object."::= { mteTrigger 1 }---- Trigger Table--mteTriggerTable OBJECT-TYPESYNTAX SEQUENCE OF MteTriggerEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event trigger information."::= { mteTrigger 2 }mteTriggerEntry OBJECT-TYPESYNTAX MteTriggerEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single trigger. Applications create andExpires 7 December 2000 [Page 13]Internet Draft Distributed Management Event MIB 7 June 2000delete entries using mteTriggerEntryStatus."INDEX { mteOwner, IMPLIED mteTriggerName }::= { mteTriggerTable 1 }MteTriggerEntry ::= SEQUENCE {mteOwner SnmpAdminString,mteTriggerName SnmpAdminString,mteTriggerComment SnmpAdminString,mteTriggerTest BITS,mteTriggerSampleType INTEGER,mteTriggerValueID OBJECT IDENTIFIER,mteTriggerValueIDWildcard TruthValue,mteTriggerTargetTag SnmpTagValue,mteTriggerContextName SnmpAdminString,mteTriggerContextNameWildcard TruthValue,mteTriggerFrequency Unsigned32,mteTriggerObjectsOwner SnmpAdminString,mteTriggerObjects SnmpAdminString,mteTriggerEnabled TruthValue,mteTriggerEntryStatus RowStatus}mteOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE(0..32))MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"The owner of this entry. The exact semantics of thisstring are subject to the security policy defined by thesecurity administrator."::= { mteTriggerEntry 1 }mteTriggerName OBJECT-TYPESYNTAX SnmpAdminString (SIZE (1..32))MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A locally-unique, administratively assigned name for thetrigger within the scope of mteOwner."::= { mteTriggerEntry 2 }mteTriggerComment OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS read-createSTATUS currentExpires 7 December 2000 [Page 14]Internet Draft Distributed Management Event MIB 7 June 2000DESCRIPTION"A description of the trigger's function and use."DEFVAL { ''H }::= { mteTriggerEntry 3 }mteTriggerTest OBJECT-TYPESYNTAX BITS { existence(0), boolean(1), threshold(2) }MAX-ACCESS read-createSTATUS currentDESCRIPTION"The type of trigger test to perform. For 'boolean' and'threshold' tests, the object at mteTriggerValueID MUSTevaluate to an integer, that is, anything that ends up encodedfor transmission (that is, in BER, not ASN.1) as an integer.For 'existence', the specific test is as selected bymteTriggerExistenceTest. When an object appears, vanishesor changes value, the trigger fires. If the object'sappearance caused the trigger firing, the object MUSTvanish before the trigger can be fired again for it, andvice versa. If the trigger fired due to a change in theobject's value, it will be fired again on every successivevalue change for that object.For 'boolean', the specific test is as selected bymteTriggerBooleanTest. If the test result is true the triggerfires. The trigger will not fire again until the value hasbecome false and come back to true.For 'threshold' the test works as described below formteTriggerThresholdStartup, mteTriggerThresholdRising, andmteTriggerThresholdFalling.Note that combining 'boolean' and 'threshold' tests on thesame object may be somewhat redundant."DEFVAL { { boolean } }::= { mteTriggerEntry 4 }mteTriggerSampleType OBJECT-TYPESYNTAX INTEGER { absoluteValue(1), deltaValue(2) }MAX-ACCESS read-createSTATUS currentDESCRIPTION"The type of sampling to perform.Expires 7 December 2000 [Page 15]Internet Draft Distributed Management Event MIB 7 June 2000An 'absoluteValue' sample requires only a single sample to bemeaningful, and is exactly the value of the object atmteTriggerValueID at the sample time.A 'deltaValue' requires two samples to be meaningful and isthus not available for testing until the second and subsequentsamples after the object at mteTriggerValueID is first foundto exist. It is the difference between the two samples. Forunsigned values it is always positive, based on unsignedarithmetic. For signed values it can be positive or negative.For SNMP counters to be meaningful they should be sampled as a'deltaValue'.For 'deltaValue' mteTriggerDeltaTable contains furtherparameters.If only 'existence' is set in mteTriggerTest this object hasno meaning."DEFVAL { absoluteValue }::= { mteTriggerEntry 5 }mteTriggerValueID OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS read-createSTATUS currentDESCRIPTION"The object identifier of the MIB object to sample to seeif the trigger should fire.This may be wildcarded by truncating all or part of theinstance portion, in which case the value is obtainedas if with a GetNext function, checking multiple valuesif they exist. If such wildcarding is applied,mteTriggerValueIDWildcard must be 'true' and if not it mustbe 'false'.Bad object identifiers or a mismatch between truncating theidentifier and the value of mteTriggerValueIDWildcard resultin operation as one would expect when providing the wrongidentifier to a Get or GetNext operation. The Get will failor get the wrong object. The GetNext will indeed get whateveris next, proceeding until it runs past the initial part of theidentifier and perhaps many unintended objects for confusingresults. If the value syntax of those objects is not usable,Expires 7 December 2000 [Page 16]Internet Draft Distributed Management Event MIB 7 June 2000that results in a 'badType' error that terminates the scan.Each instance that fills the wildcard is independent of anyadditional instances, that is, wildcarded objects operateas if there were a separate table entry for each instancethat fills the wildcard without having to actually predictall possible instances ahead of time."DEFVAL { zeroDotZero }::= { mteTriggerEntry 6 }mteTriggerValueIDWildcard OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-createSTATUS currentDESCRIPTION"Control for whether mteTriggerValueID is to be treated asfully-specified or wildcarded, with 'true' indicating wildcard."DEFVAL { false }::= { mteTriggerEntry 7 }mteTriggerTargetTag OBJECT-TYPESYNTAX SnmpTagValueMAX-ACCESS read-createSTATUS currentDESCRIPTION"The tag for the target(s) from which to obtain the conditionfor a trigger check.A length of 0 indicates the local system. In this case,access to the objects indicated by mteTriggerValueID is underthe security credentials of the requester that setmteTriggerEntryStatus to 'active'. Those credentials are theinput parameters for isAccessAllowed from the Architecture forDescribing SNMP Management Frameworks.Otherwise access rights are checked according to the securityparameters resulting from the tag."DEFVAL { ''H }::= { mteTriggerEntry 8 }mteTriggerContextName OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS read-createSTATUS currentDESCRIPTIONExpires 7 December 2000 [Page 17]Internet Draft Distributed Management Event MIB 7 June 2000"The management context from which to obtain mteTriggerValueID.This may be wildcarded by leaving characters off the end. Forexample use 'Repeater' to wildcard to 'Repeater1','Repeater2', 'Repeater-999.87b', and so on. To indicate suchwildcarding is intended, mteTriggerContextNameWildcard mustbe 'true'.Each instance that fills the wildcard is independent of anyadditional instances, that is, wildcarded objects operateas if there were a separate table entry for each instancethat fills the wildcard without having to actually predictall possible instances ahead of time.Operation of this feature assumes that the local system has alist of available contexts against which to apply thewildcard. If the objects are being read from the localsystem, this is clearly the system's own list of contexts.For a remote system a local version of such a list is notdefined by any current standard and may not be available, sothis function MAY not be supported."DEFVAL { ''H }::= { mteTriggerEntry 9 }mteTriggerContextNameWildcard OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-createSTATUS currentDESCRIPTION"Control for whether mteTriggerContextName is to be treated asfully-specified or wildcarded, with 'true' indicating wildcard."DEFVAL { false }::= { mteTriggerEntry 10 }mteTriggerFrequency OBJECT-TYPESYNTAX Unsigned32UNITS "seconds"MAX-ACCESS read-createSTATUS currentDESCRIPTION"The number of seconds to wait between trigger samples. Toencourage consistency in sampling, the interval is measuredfrom the beginning of one check to the beginning of the nextand the timer is restarted immediately when it expires, notwhen the check completes.Expires 7 December 2000 [Page 18]Internet Draft Distributed Management Event MIB 7 June 2000If the next sample begins before the previous one completed thesystem may either attempt to make the check or treat this as anerror condition with the error 'sampleOverrun'.A frequency of 0 indicates instantaneous recognition of thecondition. This is not possible in many cases, but maybe supported in cases where it makes sense and the system isable to do so. This feature allows the MIB to be used inimplementations where such interrupt-driven behavior ispossible and is not likely to be supported for all MIB objectseven then since such sampling generally has to be tightlyintegrated into low-level code.Systems that can support this SHOULD document those caseswhere it can be used. In cases where it can not, setting thisobject to 0 should be disallowed."DEFVAL { 600 }::= { mteTriggerEntry 11 }mteTriggerObjectsOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-createSTATUS currentDESCRIPTION"To go with mteTriggerObjects, the mteOwner of a group ofobjects from mteObjectsTable."DEFVAL { ''H }::= { mteTriggerEntry 12 }mteTriggerObjects OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-createSTATUS currentDESCRIPTION"The mteObjectsName of a group of objects frommteObjectsTable. These objects are to be added to anyNotification resulting from the firing of this trigger.A list of objects may also be added based on the event or onthe value of mteTriggerTest.A length of 0 indicates no additional objects."DEFVAL { ''H }::= { mteTriggerEntry 13 }Expires 7 December 2000 [Page 19]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerEnabled OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-createSTATUS currentDESCRIPTION"A control to allow a trigger to be configured but not used.When the value is 'false' the trigger is not sampled."DEFVAL { false }::= { mteTriggerEntry 14 }mteTriggerEntryStatus OBJECT-TYPESYNTAX RowStatusMAX-ACCESS read-createSTATUS currentDESCRIPTION"The control that allows creation and deletion of entries.Once made active an entry may not be modified except todelete it."::= { mteTriggerEntry 15 }---- Trigger Delta Table--mteTriggerDeltaTable OBJECT-TYPESYNTAX SEQUENCE OF MteTriggerDeltaEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event trigger information for deltasampling."::= { mteTrigger 3 }mteTriggerDeltaEntry OBJECT-TYPESYNTAX MteTriggerDeltaEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single trigger's delta sampling. Entriesautomatically exist in this this table for each mteTriggerEntrythat has mteTriggerSampleType set to 'deltaValue'."INDEX { mteOwner, IMPLIED mteTriggerName }::= { mteTriggerDeltaTable 1 }Expires 7 December 2000 [Page 20]Internet Draft Distributed Management Event MIB 7 June 2000MteTriggerDeltaEntry ::= SEQUENCE {mteTriggerDeltaDiscontinuityID OBJECT IDENTIFIER,mteTriggerDeltaDiscontinuityIDWildcard TruthValue,mteTriggerDeltaDiscontinuityIDType INTEGER}sysUpTimeInstance OBJECT IDENTIFIER ::= { sysUpTime 0 }mteTriggerDeltaDiscontinuityID OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS read-writeSTATUS currentDESCRIPTION"The OBJECT IDENTIFIER (OID) of a TimeTicks, TimeStamp, orDateAndTime object that indicates a discontinuity in the valueat mteTriggerValueID.The OID may be for a leaf object (e.g. sysUpTime.0) or maybe wildcarded to match mteTriggerValueID.This object supports normal checking for a discontinuity in acounter. Note that if this object does not point to sysUpTimediscontinuity checking MUST still check sysUpTime for an overalldiscontinuity.If the object identified is not accessible the sample attemptis in error, with the error code as from an SNMP request.Bad object identifiers or a mismatch between truncating theidentifier and the value of mteDeltaDiscontinuityIDWildcardresult in operation as one would expect when providing thewrong identifier to a Get operation. The Get will fail or getthe wrong object. If the value syntax of those objects is notusable, that results in an error that terminates the samplewith a 'badType' error code."DEFVAL { sysUpTimeInstance }::= { mteTriggerDeltaEntry 1 }mteTriggerDeltaDiscontinuityIDWildcard OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-writeSTATUS currentDESCRIPTION"Control for whether mteTriggerDeltaDiscontinuityID is to beExpires 7 December 2000 [Page 21]Internet Draft Distributed Management Event MIB 7 June 2000treated as fully-specified or wildcarded, with 'true'indicating wildcard. Note that the value of this object willbe the same as that of the corresponding instance ofmteTriggerValueIDWildcard when the correspondingmteTriggerSampleType is 'deltaValue'."DEFVAL { false }::= { mteTriggerDeltaEntry 2 }mteTriggerDeltaDiscontinuityIDType OBJECT-TYPESYNTAX INTEGER { timeTicks(1), timeStamp(2), dateAndTime(3) }MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The value 'timeTicks' indicates themteTriggerDeltaDiscontinuityID of this row is of syntaxTimeTicks. The value 'timeStamp' indicates syntax TimeStamp.The value 'dateAndTime' indicates syntax DateAndTime."DEFVAL { timeTicks }::= { mteTriggerDeltaEntry 3 }---- Trigger Existence Table--mteTriggerExistenceTable OBJECT-TYPESYNTAX SEQUENCE OF MteTriggerExistenceEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event trigger information for existencetriggers."::= { mteTrigger 4 }mteTriggerExistenceEntry OBJECT-TYPESYNTAX MteTriggerExistenceEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single existence trigger. Entriesautomatically exist in this this table for each mteTriggerEntrythat has 'existence' set in mteTriggerTest."INDEX { mteOwner, IMPLIED mteTriggerName }::= { mteTriggerExistenceTable 1 }Expires 7 December 2000 [Page 22]Internet Draft Distributed Management Event MIB 7 June 2000MteTriggerExistenceEntry ::= SEQUENCE {mteTriggerExistenceTest BITS,mteTriggerExistenceStartup BITS,mteTriggerExistenceObjectsOwner SnmpAdminString,mteTriggerExistenceObjects SnmpAdminString,mteTriggerExistenceEventOwner SnmpAdminString,mteTriggerExistenceEvent SnmpAdminString}mteTriggerExistenceTest OBJECT-TYPESYNTAX BITS { present(0), absent(1), changed(2) }MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The type of existence test to perform. The trigger fireswhen the object at mteTriggerValueID is seen to go frompresent to absent, from absent to present, or to have it'svalue changed, depending on which tests are selected:present(0) - when this test is selected, the trigger fireswhen the mteTriggerValueID object goes from absent to present.absent(1) - when this test is selected, the trigger fireswhen the mteTriggerValueID object goes from present to absent.changed(2) - when this test is selected, the trigger firesthe mteTriggerValueID object value changes.Once the trigger has fired for either presence or absence itwill not fire again for that state until the object has beento the other state. "DEFVAL { { present, absent } }::= { mteTriggerExistenceEntry 1 }mteTriggerExistenceStartup OBJECT-TYPESYNTAX BITS { present(0), absent(1) }MAX-ACCESS read-writeSTATUS currentDESCRIPTION"Control for whether an event may be triggered when this entryis first set to 'active' and the test specified bymteTriggerExistenceTest is true. Setting an option causesthat trigger to fire when its test is true."DEFVAL { { present, absent } }::= { mteTriggerExistenceEntry 2 }Expires 7 December 2000 [Page 23]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerExistenceObjectsOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerExistenceObjects, the mteOwner of agroup of objects from mteObjectsTable."DEFVAL { ''H }::= { mteTriggerExistenceEntry 3 }mteTriggerExistenceObjects OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteObjectsName of a group of objects frommteObjectsTable. These objects are to be added to anyNotification resulting from the firing of this trigger forthis test.A list of objects may also be added based on the overalltrigger, the event or other settings in mteTriggerTest.A length of 0 indicates no additional objects."DEFVAL { ''H }::= { mteTriggerExistenceEntry 4 }mteTriggerExistenceEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerExistenceEvent, the mteOwner of an evententry from the mteEventTable."DEFVAL { ''H }::= { mteTriggerExistenceEntry 5 }mteTriggerExistenceEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'existence' and this trigger fires. A length of 0 indicates noevent."Expires 7 December 2000 [Page 24]Internet Draft Distributed Management Event MIB 7 June 2000DEFVAL { ''H }::= { mteTriggerExistenceEntry 6 }---- Trigger Boolean Table--mteTriggerBooleanTable OBJECT-TYPESYNTAX SEQUENCE OF MteTriggerBooleanEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event trigger information for booleantriggers."::= { mteTrigger 5 }mteTriggerBooleanEntry OBJECT-TYPESYNTAX MteTriggerBooleanEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single boolean trigger. Entriesautomatically exist in this this table for each mteTriggerEntrythat has 'boolean' set in mteTriggerTest."INDEX { mteOwner, IMPLIED mteTriggerName }::= { mteTriggerBooleanTable 1 }MteTriggerBooleanEntry ::= SEQUENCE {mteTriggerBooleanComparison INTEGER,mteTriggerBooleanValue Integer32,mteTriggerBooleanStartup TruthValue,mteTriggerBooleanObjectsOwner SnmpAdminString,mteTriggerBooleanObjects SnmpAdminString,mteTriggerBooleanEventOwner SnmpAdminString,mteTriggerBooleanEvent SnmpAdminString}mteTriggerBooleanComparison OBJECT-TYPESYNTAX INTEGER { unequal(1), equal(2),less(3), lessOrEqual(4),greater(5), greaterOrEqual(6) }MAX-ACCESS read-writeSTATUS currentDESCRIPTIONExpires 7 December 2000 [Page 25]Internet Draft Distributed Management Event MIB 7 June 2000"The type of boolean comparison to perform.The value at mteTriggerValueID is compared tomteTriggerBooleanValue, so for example ifmteTriggerBooleanComparison is 'less' the result would be trueif the value at mteTriggerValueID is less than the value ofmteTriggerBooleanValue."DEFVAL { unequal }::= { mteTriggerBooleanEntry 1 }mteTriggerBooleanValue OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The value to use for the test specified bymteTriggerBooleanTest."DEFVAL { 0 }::= { mteTriggerBooleanEntry 2 }mteTriggerBooleanStartup OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-writeSTATUS currentDESCRIPTION"Control for whether an event may be triggered when this entryis first set to 'active' or a new instance of the object atmteTriggerValueID is found and the test specified bymteTriggerBooleanComparison is true. In that case an event istriggered if mteTriggerBooleanStartup is 'true'."DEFVAL { true }::= { mteTriggerBooleanEntry 3 }mteTriggerBooleanObjectsOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerBooleanObjects, the mteOwner of a groupof objects from mteObjectsTable."DEFVAL { ''H }::= { mteTriggerBooleanEntry 4 }mteTriggerBooleanObjects OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))Expires 7 December 2000 [Page 26]Internet Draft Distributed Management Event MIB 7 June 2000MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteObjectsName of a group of objects frommteObjectsTable. These objects are to be added to anyNotification resulting from the firing of this trigger forthis test.A list of objects may also be added based on the overalltrigger, the event or other settings in mteTriggerTest.A length of 0 indicates no additional objects."DEFVAL { ''H }::= { mteTriggerBooleanEntry 5 }mteTriggerBooleanEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerBooleanEvent, the mteOwner of an evententry from mteEventTable."DEFVAL { ''H }::= { mteTriggerBooleanEntry 6 }mteTriggerBooleanEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'boolean' and this trigger fires. A length of 0 indicates noevent."DEFVAL { ''H }::= { mteTriggerBooleanEntry 7 }---- Trigger Threshold Table--mteTriggerThresholdTable OBJECT-TYPESYNTAX SEQUENCE OF MteTriggerThresholdEntryMAX-ACCESS not-accessibleSTATUS currentExpires 7 December 2000 [Page 27]Internet Draft Distributed Management Event MIB 7 June 2000DESCRIPTION"A table of management event trigger information for thresholdtriggers."::= { mteTrigger 6 }mteTriggerThresholdEntry OBJECT-TYPESYNTAX MteTriggerThresholdEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single threshold trigger. Entriesautomatically exist in this table for each mteTriggerEntrythat has 'threshold' set in mteTriggerTest."INDEX { mteOwner, IMPLIED mteTriggerName }::= { mteTriggerThresholdTable 1 }MteTriggerThresholdEntry ::= SEQUENCE {mteTriggerThresholdStartup INTEGER,mteTriggerThresholdRising Integer32,mteTriggerThresholdFalling Integer32,mteTriggerThresholdDeltaRising Integer32,mteTriggerThresholdDeltaFalling Integer32,mteTriggerThresholdObjectsOwner SnmpAdminString,mteTriggerThresholdObjects SnmpAdminString,mteTriggerThresholdRisingEventOwner SnmpAdminString,mteTriggerThresholdRisingEvent SnmpAdminString,mteTriggerThresholdFallingEventOwner SnmpAdminString,mteTriggerThresholdFallingEvent SnmpAdminString,mteTriggerThresholdDeltaRisingEventOwner SnmpAdminString,mteTriggerThresholdDeltaRisingEvent SnmpAdminString,mteTriggerThresholdDeltaFallingEventOwner SnmpAdminString,mteTriggerThresholdDeltaFallingEvent SnmpAdminString}mteTriggerThresholdStartup OBJECT-TYPESYNTAX INTEGER { rising(1), falling(2), risingOrFalling(3) }MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The event that may be triggered when this entry is firstset to 'active' and a new instance of the object atmteTriggerValueID is found. If the first sample after thisinstance becomes active is greater than or equal tomteTriggerThresholdRising and mteTriggerThresholdStartup isequal to 'rising' or 'risingOrFalling', then oneExpires 7 December 2000 [Page 28]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerThresholdRisingEvent is triggered for that instance.If the first sample after this entry becomes active is lessthan or equal to mteTriggerThresholdFalling andmteTriggerThresholdStartup is equal to 'falling' or'risingOrFalling', then one mteTriggerThresholdRisingEvent istriggered for that instance."DEFVAL { risingOrFalling }::= { mteTriggerThresholdEntry 1 }mteTriggerThresholdRising OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"A threshold value to check against if mteTriggerType is'threshold'.When the current sampled value is greater than or equal tothis threshold, and the value at the last sampling intervalwas less than this threshold, onemteTriggerThresholdRisingEvent is triggered. That event isalso triggered if the first sample after this entry becomesactive is greater than or equal to this threshold andmteTriggerThresholdStartup is equal to 'rising' or'risingOrFalling'.After a rising event is generated, another such event is nottriggered until the sampled value falls below this thresholdand reaches mteTriggerThresholdFalling."DEFVAL { 0 }::= { mteTriggerThresholdEntry 2 }mteTriggerThresholdFalling OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"A threshold value to check against if mteTriggerType is'threshold'.When the current sampled value is less than or equal to thisthreshold, and the value at the last sampling interval wasgreater than this threshold, onemteTriggerThresholdFallingEvent is triggered. That event isalso triggered if the first sample afer this entry becomesExpires 7 December 2000 [Page 29]Internet Draft Distributed Management Event MIB 7 June 2000active is less than or equal to this threshold andmteTriggerThresholdStartup is equal to 'falling' or'risingOrFalling'.After a falling event is generated, another such event is nottriggered until the sampled value rises above this thresholdand reaches mteTriggerThresholdRising."DEFVAL { 0 }::= { mteTriggerThresholdEntry 3 }mteTriggerThresholdDeltaRising OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"A threshold value to check against if mteTriggerType is'threshold'.When the delta value (difference) between the current sampledvalue (value(n)) and the previous sampled value (value(n-1))is greater than or equal to this threshold,and the delta value calculated at the last sampling interval(i.e. value(n-1) - value(n-2)) was less than this threshold,one mteTriggerThresholdDeltaRisingEvent is triggered. That event isalso triggered if the first delta value calculated after thisentry becomes active, i.e. value(2) - value(1), where value(1)is the first sample taken of that instance, is greater than orequal to this threshold.After a rising event is generated, another such event is nottriggered until the delta value falls below this threshold andreaches mteTriggerThresholdDeltaFalling."DEFVAL { 0 }::= { mteTriggerThresholdEntry 4 }mteTriggerThresholdDeltaFalling OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"A threshold value to check against if mteTriggerType is'threshold'.When the delta value (difference) between the current sampledvalue (value(n)) and the previous sampled value (value(n-1))Expires 7 December 2000 [Page 30]Internet Draft Distributed Management Event MIB 7 June 2000is less than or equal to this threshold,and the delta value calculated at the last sampling interval(i.e. value(n-1) - value(n-2)) was greater than this threshold,one mteTriggerThresholdDeltaFallingEvent is triggered. That event isalso triggered if the first delta value calculated after thisentry becomes active, i.e. value(2) - value(1), where value(1)is the first sample taken of that instance, is less than orequal to this threshold.After a falling event is generated, another such event is nottriggered until the delta value falls below this threshold andreaches mteTriggerThresholdDeltaRising."DEFVAL { 0 }::= { mteTriggerThresholdEntry 5 }mteTriggerThresholdObjectsOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerThresholdObjects, the mteOwner of a groupof objects from mteObjectsTable."DEFVAL { ''H }::= { mteTriggerThresholdEntry 6 }mteTriggerThresholdObjects OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteObjectsName of a group of objects frommteObjectsTable. These objects are to be added to anyNotification resulting from the firing of this trigger forthis test.A list of objects may also be added based on the overalltrigger, the event or other settings in mteTriggerTest.A length of 0 indicates no additional objects."DEFVAL { ''H }::= { mteTriggerThresholdEntry 7 }mteTriggerThresholdRisingEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeExpires 7 December 2000 [Page 31]Internet Draft Distributed Management Event MIB 7 June 2000STATUS currentDESCRIPTION"To go with mteTriggerThresholdRisingEvent, the mteOwner of anevent entry from mteEventTable."DEFVAL { ''H }::= { mteTriggerThresholdEntry 8 }mteTriggerThresholdRisingEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'threshold' and this trigger fires based onmteTriggerThresholdRising. A length of 0 indicates no event."DEFVAL { ''H }::= { mteTriggerThresholdEntry 9 }mteTriggerThresholdFallingEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerThresholdFallingEvent, the mteOwner of anevent entry from mteEventTable."DEFVAL { ''H }::= { mteTriggerThresholdEntry 10 }mteTriggerThresholdFallingEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'threshold' and this trigger fires based onmteTriggerThresholdFalling. A length of 0 indicates no event."DEFVAL { ''H }::= { mteTriggerThresholdEntry 11 }mteTriggerThresholdDeltaRisingEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerThresholdDeltaRisingEvent, the mteOwnerExpires 7 December 2000 [Page 32]Internet Draft Distributed Management Event MIB 7 June 2000of an event entry from mteEventTable."DEFVAL { ''H }::= { mteTriggerThresholdEntry 12 }mteTriggerThresholdDeltaRisingEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'threshold' and this trigger fires based onmteTriggerThresholdDeltaRising. A length of 0 indicatesno event."DEFVAL { ''H }::= { mteTriggerThresholdEntry 13 }mteTriggerThresholdDeltaFallingEventOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteTriggerThresholdDeltaFallingEvent, the mteOwnerof an event entry from mteEventTable."DEFVAL { ''H }::= { mteTriggerThresholdEntry 14 }mteTriggerThresholdDeltaFallingEvent OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteEventName of the event to invoke when mteTriggerType is'threshold' and this trigger fires based onmteTriggerThresholdDeltaFalling. A length of 0 indicatesno event."DEFVAL { ''H }::= { mteTriggerThresholdEntry 15 }---- Objects Table--mteObjectsTable OBJECT-TYPESYNTAX SEQUENCE OF MteObjectsEntryExpires 7 December 2000 [Page 33]Internet Draft Distributed Management Event MIB 7 June 2000MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of objects that can be added to notifications basedon the trigger, trigger test, or event, as pointed to byentries in those tables."::= { mteObjects 1 }mteObjectsEntry OBJECT-TYPESYNTAX MteObjectsEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A group of objects. Applications create and delete entriesusing mteObjectsEntryStatus.When adding objects to a notification they are added in thelexical order of their index in this table. Those associatedwith a trigger come first, then trigger test, then event."INDEX { mteOwner, mteObjectsName, mteObjectsIndex }::= { mteObjectsTable 1 }MteObjectsEntry ::= SEQUENCE {mteObjectsName SnmpAdminString,mteObjectsIndex Unsigned32,mteObjectsID OBJECT IDENTIFIER,mteObjectsIDWildcard TruthValue,mteObjectsEntryStatus RowStatus}mteObjectsName OBJECT-TYPESYNTAX SnmpAdminString (SIZE (1..32))MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A locally-unique, administratively assigned name for a groupof objects."::= { mteObjectsEntry 1 }mteObjectsIndex OBJECT-TYPESYNTAX Unsigned32 (1..4294967295)MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"An arbitrary integer for the purpose of identifyingExpires 7 December 2000 [Page 34]Internet Draft Distributed Management Event MIB 7 June 2000individual objects within a mteObjectsName group.Objects within a group are placed in the notification in thenumerical order of this index.Groups are placed in the notification in the order of theselections for overall trigger, trigger test, and event.Within trigger test they are in the same order as thenumerical values of the bits defined for mteTriggerTest.Bad object identifiers or a mismatch between truncating theidentifier and the value of mteDeltaDiscontinuityIDWildcardresult in operation as one would expect when providing thewrong identifier to a Get operation. The Get will fail or getthe wrong object. If the object is not available it is omittedfrom the notification."::= { mteObjectsEntry 2 }mteObjectsID OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS read-createSTATUS currentDESCRIPTION"The object identifier of a MIB object to add to aNotification that results from the firing of a trigger.This may be wildcarded by truncating all or part of theinstance portion, in which case the instance portion of theOID for obtaining this object will be the same as that usedin obtaining the mteTriggerValueID that fired. If suchwildcarding is applied, mteObjectsIDWildcard must be'true' and if not it must be 'false'.Each instance that fills the wildcard is independent of anyadditional instances, that is, wildcarded objects operateas if there were a separate table entry for each instancethat fills the wildcard without having to actually predictall possible instances ahead of time."DEFVAL { zeroDotZero }::= { mteObjectsEntry 3 }mteObjectsIDWildcard OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-createSTATUS currentExpires 7 December 2000 [Page 35]Internet Draft Distributed Management Event MIB 7 June 2000DESCRIPTION"Control for whether mteObjectsID is to be treated asfully-specified or wildcarded, with 'true' indicating wildcard."DEFVAL { false }::= { mteObjectsEntry 4 }mteObjectsEntryStatus OBJECT-TYPESYNTAX RowStatusMAX-ACCESS read-createSTATUS currentDESCRIPTION"The control that allows creation and deletion of entries.Once made active an entry MAY not be modified except todelete it."::= { mteObjectsEntry 5 }---- Event Section---- CountersmteEventFailures OBJECT-TYPESYNTAX Counter32MAX-ACCESS read-onlySTATUS currentDESCRIPTION"The number of times an attempt to invoke an eventhas failed. This counts individually for eachattempt in a group of targets or each attempt for awildcarded trigger object."::= { mteEvent 1 }---- Event Table--mteEventTable OBJECT-TYPESYNTAX SEQUENCE OF MteEventEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event action information."Expires 7 December 2000 [Page 36]Internet Draft Distributed Management Event MIB 7 June 2000::= { mteEvent 2 }mteEventEntry OBJECT-TYPESYNTAX MteEventEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single event. Applications create anddelete entries using mteEventEntryStatus."INDEX { mteOwner, IMPLIED mteEventName }::= { mteEventTable 1 }MteEventEntry ::= SEQUENCE {mteEventName SnmpAdminString,mteEventComment SnmpAdminString,mteEventActions BITS,mteEventEnabled TruthValue,mteEventEntryStatus RowStatus}mteEventName OBJECT-TYPESYNTAX SnmpAdminString (SIZE (1..32))MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A locally-unique, administratively assigned name for theevent."::= { mteEventEntry 1 }mteEventComment OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS read-createSTATUS currentDESCRIPTION"A description of the event's function and use."DEFVAL { ''H }::= { mteEventEntry 2 }mteEventActions OBJECT-TYPESYNTAX BITS { notification(0), set(1) }MAX-ACCESS read-createSTATUS currentDESCRIPTION"The actions to perform when this event occurs.Expires 7 December 2000 [Page 37]Internet Draft Distributed Management Event MIB 7 June 2000For 'notification', Traps and/or Informs are sent accordingto the configuration in the SNMP Notification MIB.For 'set', an SNMP Set operation is performed according tocontrol values in this entry."DEFVAL { {} } -- No bits set.::= { mteEventEntry 3 }mteEventEnabled OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-createSTATUS currentDESCRIPTION"A control to allow an event to be configured but not used.When the value is 'false' the event does not execute even iftriggered."DEFVAL { false }::= { mteEventEntry 4 }mteEventEntryStatus OBJECT-TYPESYNTAX RowStatusMAX-ACCESS read-createSTATUS currentDESCRIPTION"The control that allows creation and deletion of entries.Once made active an entry MAY not be modified except todelete it."::= { mteEventEntry 5 }---- Event Notification Table--mteEventNotificationTable OBJECT-TYPESYNTAX SEQUENCE OF MteEventNotificationEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of information about notifications to be sent as aconsequence of management events."::= { mteEvent 3 }mteEventNotificationEntry OBJECT-TYPESYNTAX MteEventNotificationEntryExpires 7 December 2000 [Page 38]Internet Draft Distributed Management Event MIB 7 June 2000MAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single event's notification. Entriesautomatically exist in this this table for each mteEventEntrythat has 'notification' set in mteEventActions."INDEX { mteOwner, IMPLIED mteEventName }::= { mteEventNotificationTable 1 }MteEventNotificationEntry ::= SEQUENCE {mteEventNotification OBJECT IDENTIFIER,mteEventNotificationObjectsOwner SnmpAdminString,mteEventNotificationObjects SnmpAdminString}mteEventNotification OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS read-writeSTATUS currentDESCRIPTION"The object identifier from the NOTIFICATION-TYPE for thenotification to use if metEventActions has 'notification' set."DEFVAL { zeroDotZero }::= { mteEventNotificationEntry 1 }mteEventNotificationObjectsOwner OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"To go with mteEventNotificationObjects, the mteOwner of agroup of objects from mteObjectsTable."DEFVAL { ''H }::= { mteEventNotificationEntry 2 }mteEventNotificationObjects OBJECT-TYPESYNTAX SnmpAdminString (SIZE (0..32))MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The mteObjectsName of a group of objects frommteObjectsTable if mteEventActions has 'notification' set.These objects are to be added to any Notification generated bythis event.Expires 7 December 2000 [Page 39]Internet Draft Distributed Management Event MIB 7 June 2000Objects may also be added based on the trigger that stimulatedthe event.A length of 0 indicates no additional objects."DEFVAL { ''H }::= { mteEventNotificationEntry 3 }---- Event Set Table--mteEventSetTable OBJECT-TYPESYNTAX SEQUENCE OF MteEventSetEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"A table of management event action information."::= { mteEvent 4 }mteEventSetEntry OBJECT-TYPESYNTAX MteEventSetEntryMAX-ACCESS not-accessibleSTATUS currentDESCRIPTION"Information about a single event's set option. Entriesautomatically exist in this this table for each mteEventEntrythat has 'set' set in mteEventActions."INDEX { mteOwner, IMPLIED mteEventName }::= { mteEventSetTable 1 }MteEventSetEntry ::= SEQUENCE {mteEventSetObject OBJECT IDENTIFIER,mteEventSetObjectWildcard TruthValue,mteEventSetValue Integer32,mteEventSetTargetTag SnmpTagValue,mteEventSetContextName SnmpAdminString,mteEventSetContextNameWildcard TruthValue}mteEventSetObject OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS read-writeSTATUS currentDESCRIPTIONExpires 7 December 2000 [Page 40]Internet Draft Distributed Management Event MIB 7 June 2000"The object identifier from the MIB object to set ifmteEventActions has 'set' set.This object identifier may be wildcarded by leavingsub-identifiers off the end, in which casenteEventSetObjectWildCard must be 'true'.If mteEventSetObject is wildcarded the instance used to set theobject to which it points is the same as the instance from thevalue of mteTriggerValueID that triggered the event.Each instance that fills the wildcard is independent of anyadditional instances, that is, wildcarded objects operateas if there were a separate table entry for each instancethat fills the wildcard without having to actually predictall possible instances ahead of time.Bad object identifiers or a mismatch between truncating theidentifier and the value of mteSetObjectWildcardresult in operation as one would expect when providing thewrong identifier to a Set operation. The Set will fail or setthe wrong object. If the value syntax of the destinationobject is not correct, the Set fails with the normal SNMPerror code."DEFVAL { zeroDotZero }::= { mteEventSetEntry 1 }mteEventSetObjectWildcard OBJECT-TYPESYNTAX TruthValueMAX-ACCESS read-writeSTATUS currentDESCRIPTION"Control over whether mteEventSetObject is to be treated asfully-specified or wildcarded, with 'true' indicating wildcardif mteEventActions has 'set' set."DEFVAL { false }::= { mteEventSetEntry 2 }mteEventSetValue OBJECT-TYPESYNTAX Integer32MAX-ACCESS read-writeSTATUS currentDESCRIPTION"The value to which to set the object at mteEventSetObjectif mteEventActions has 'set' set."Expires 7 December 2000 [Page 41]Internet Draft Distributed Management Event MIB 7 June 2000DEFVAL { 0 }::= { mteEventSetEntry 3 }mteEventSetTargetTag OBJECT-TYPESYNTAX SnmpTagValueMAX-ACCESS read-writeSTATUS currentDESCRIPTION"The tag for the target(s) at which to set the object atmteEventSetObject to mteEventSetValue if mteEventActionshas 'set' set.Systems limited to self management MAY reject a non-zerolength for the value of this object.A length of 0 indicates the local system. In this case,access to the objects indicated by mteEventSetObject is underthe security credentials of the requester that setmteTriggerEntryStatus to 'active'. Those credentials are theinput parameters for isAccessAllowed from the Architecture forDescribing SNMP Management Frameworks.Otherwise access rights are checked according to the securityparameters resulting from the tag."DEFVAL { ''H }::= { mteEventSetEntry 4 }mteEventSetContextName OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS read-writeSTATUS currentDESCRIPTION"The management context in which to set mteEventObjectID.if mteEventActions has 'set' set.This may be wildcarded by leaving characters off the end. Toindicate such wildcarding mteEventSetContextNameWildcard mustbe 'true'.If this context name is wildcarded the value used to completethe wildcarding of mteTriggerContextName will be appended."DEFVAL { ''H }::= { mteEventSetEntry 5 }mteEventSetContextNameWildcard OBJECT-TYPEExpires 7 December 2000 [Page 42]Internet Draft Distributed Management Event MIB 7 June 2000SYNTAX TruthValueMAX-ACCESS read-writeSTATUS currentDESCRIPTION"Control for whether mteEventSetContextName is to be treated asfully-specified or wildcarded, with 'true' indicating wildcardif mteEventActions has 'set' set."DEFVAL { false }::= { mteEventSetEntry 6 }---- Notifications--dismanEventMIBNotificationPrefix OBJECT IDENTIFIER ::={ dismanEventMIB 2 }dismanEventMIBNotifications OBJECT IDENTIFIER ::={ dismanEventMIBNotificationPrefix 0 }dismanEventMIBNotificationObjects OBJECT IDENTIFIER::= { dismanEventMIBNotificationPrefix 1 }---- Notification Objects--mteHotTrigger OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The name of the trigger causing the notification."::= { dismanEventMIBNotificationObjects 1 }mteHotTargetName OBJECT-TYPESYNTAX SnmpAdminStringMAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The SNMP Target MIB's snmpTargetAddrName related to thenotification."::= { dismanEventMIBNotificationObjects 2 }mteHotContextName OBJECT-TYPESYNTAX SnmpAdminStringExpires 7 December 2000 [Page 43]Internet Draft Distributed Management Event MIB 7 June 2000MAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The context name related to the notification. This MUST be asfully-qualified as possible, including filling in wildcardinformation determined in processing."::= { dismanEventMIBNotificationObjects 3 }mteHotOID OBJECT-TYPESYNTAX OBJECT IDENTIFIERMAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The object identifier of the destination object related to thenotification. This MUST be as fully-qualified as possible,inluding filling in wildcard information determined inprocessing.For a trigger-related notification this is frommteTriggerValueID.For a set failure this is from mteEventSetObject."::= { dismanEventMIBNotificationObjects 4 }mteHotValue OBJECT-TYPESYNTAX Integer32MAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The value of the object at mteTriggerValueID when atrigger fired."::= { dismanEventMIBNotificationObjects 5 }mteFailedReason OBJECT-TYPESYNTAX FailureReasonMAX-ACCESS accessible-for-notifySTATUS currentDESCRIPTION"The reason for the failure of an attempt to check for atrigger condition or set an object in response to an event."::= { dismanEventMIBNotificationObjects 6 }---- Notifications--Expires 7 December 2000 [Page 44]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerFired NOTIFICATION-TYPEOBJECTS { mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteHotValue }STATUS currentDESCRIPTION"Notification that the trigger indicated by the objectinstances has fired, for triggers with mteTriggerType'boolean' or 'existence'."::= { dismanEventMIBNotifications 1 }mteTriggerRising NOTIFICATION-TYPEOBJECTS { mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteHotValue }STATUS currentDESCRIPTION"Notification that the rising threshold was met for triggerswith mteTriggerType 'threshold'."::= { dismanEventMIBNotifications 2 }mteTriggerFalling NOTIFICATION-TYPEOBJECTS { mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteHotValue }STATUS currentDESCRIPTION"Notification that the falling threshold was met for triggerswith mteTriggerType 'threshold'."::= { dismanEventMIBNotifications 3 }mteTriggerFailure NOTIFICATION-TYPEOBJECTS { mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteFailedReason }STATUS currentDESCRIPTIONExpires 7 December 2000 [Page 45]Internet Draft Distributed Management Event MIB 7 June 2000"Notification that an attempt to check a trigger has failed.The network manager must enable this notification only witha certain fear and trembling, as it can easily crowd out moreimportant information. It should be used only to help diagnosea problem that has appeared in the error counters and can notbe found otherwise."::= { dismanEventMIBNotifications 4 }mteEventSetFailure NOTIFICATION-TYPEOBJECTS { mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteFailedReason }STATUS currentDESCRIPTION"Notification that an attempt to do a set in response to anevent has failed.The network manager must enable this notification only witha certain fear and trembling, as it can easily crowd out moreimportant information. It should be used only to help diagnosea problem that has appeared in the error counters and can notbe found otherwise."::= { dismanEventMIBNotifications 5 }---- Conformance--dismanEventMIBConformance OBJECT IDENTIFIER ::= { dismanEventMIB 3 }dismanEventMIBCompliances OBJECT IDENTIFIER ::={ dismanEventMIBConformance 1 }dismanEventMIBGroups OBJECT IDENTIFIER ::={ dismanEventMIBConformance 2 }-- CompliancedismanEventMIBCompliance MODULE-COMPLIANCESTATUS currentDESCRIPTION"The compliance statement for entities which implementthe Event MIB."Expires 7 December 2000 [Page 46]Internet Draft Distributed Management Event MIB 7 June 2000MODULE -- this moduleMANDATORY-GROUPS {dismanEventResourceGroup,dismanEventTriggerGroup,dismanEventObjectsGroup,dismanEventEventGroup,dismanEventNotificationObjectGroup,dismanEventNotificationGroup}OBJECT mteTriggerTargetTagMIN-ACCESS read-onlyDESCRIPTION"Write access is not required, thus limitingmonitoring to the local system or pre-configuredremote systems."OBJECT mteEventSetTargetTagMIN-ACCESS read-onlyDESCRIPTION"Write access is not required, thus limitingsetting to the local system or pre-configuredremote systems."OBJECT mteTriggerValueIDWildcardMIN-ACCESS read-onlyDESCRIPTION"Write access is not required, thus allowingthe system not to implement wildcarding."OBJECT mteTriggerContextNameWildcardMIN-ACCESS read-onlyDESCRIPTION"Write access is not required, thus allowingthe system not to implement wildcarding."OBJECT mteObjectsIDWildcardMIN-ACCESS read-onlyDESCRIPTION"Write access is not required, thus allowingthe system not to implement wildcarding."OBJECT mteEventSetContextNameWildcardMIN-ACCESS read-onlyExpires 7 December 2000 [Page 47]Internet Draft Distributed Management Event MIB 7 June 2000DESCRIPTION"Write access is not required, thus allowingthe system not to implement wildcarding."::= { dismanEventMIBCompliances 1 }-- Units of ConformancedismanEventResourceGroup OBJECT-GROUPOBJECTS {mteResourceSampleMinimum,mteResourceSampleInstanceMaximum,mteResourceSampleInstances,mteResourceSampleInstancesHigh,mteResourceSampleInstanceLacks}STATUS currentDESCRIPTION"Event resource status and control objects."::= { dismanEventMIBGroups 1 }dismanEventTriggerGroup OBJECT-GROUPOBJECTS {mteTriggerFailures,mteTriggerComment,mteTriggerTest,mteTriggerSampleType,mteTriggerValueID,mteTriggerValueIDWildcard,mteTriggerTargetTag,mteTriggerContextName,mteTriggerContextNameWildcard,mteTriggerFrequency,mteTriggerObjectsOwner,mteTriggerObjects,mteTriggerEnabled,mteTriggerEntryStatus,mteTriggerDeltaDiscontinuityID,mteTriggerDeltaDiscontinuityIDWildcard,mteTriggerDeltaDiscontinuityIDType,Expires 7 December 2000 [Page 48]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerExistenceTest,mteTriggerExistenceStartup,mteTriggerExistenceObjectsOwner,mteTriggerExistenceObjects,mteTriggerExistenceEventOwner,mteTriggerExistenceEvent,mteTriggerBooleanComparison,mteTriggerBooleanValue,mteTriggerBooleanStartup,mteTriggerBooleanObjectsOwner,mteTriggerBooleanObjects,mteTriggerBooleanEventOwner,mteTriggerBooleanEvent,mteTriggerThresholdStartup,mteTriggerThresholdObjectsOwner,mteTriggerThresholdObjects,mteTriggerThresholdRising,mteTriggerThresholdFalling,mteTriggerThresholdDeltaRising,mteTriggerThresholdDeltaFalling,mteTriggerThresholdRisingEventOwner,mteTriggerThresholdRisingEvent,mteTriggerThresholdFallingEventOwner,mteTriggerThresholdFallingEvent,mteTriggerThresholdDeltaRisingEventOwner,mteTriggerThresholdDeltaRisingEvent,mteTriggerThresholdDeltaFallingEventOwner,mteTriggerThresholdDeltaFallingEvent}STATUS currentDESCRIPTION"Event triggers."::= { dismanEventMIBGroups 2 }dismanEventObjectsGroup OBJECT-GROUPOBJECTS {mteObjectsID,mteObjectsIDWildcard,mteObjectsEntryStatus}STATUS currentDESCRIPTION"Supplemental objects."Expires 7 December 2000 [Page 49]Internet Draft Distributed Management Event MIB 7 June 2000::= { dismanEventMIBGroups 3 }dismanEventEventGroup OBJECT-GROUPOBJECTS {mteEventFailures,mteEventComment,mteEventActions,mteEventEnabled,mteEventEntryStatus,mteEventNotification,mteEventNotificationObjectsOwner,mteEventNotificationObjects,mteEventSetObject,mteEventSetObjectWildcard,mteEventSetValue,mteEventSetTargetTag,mteEventSetContextName,mteEventSetContextNameWildcard}STATUS currentDESCRIPTION"Events."::= { dismanEventMIBGroups 4 }dismanEventNotificationObjectGroup OBJECT-GROUPOBJECTS {mteHotTrigger,mteHotTargetName,mteHotContextName,mteHotOID,mteHotValue,mteFailedReason}STATUS currentDESCRIPTION"Notification objects."::= { dismanEventMIBGroups 5 }dismanEventNotificationGroup NOTIFICATION-GROUPNOTIFICATIONS {mteTriggerFired,mteTriggerRising,Expires 7 December 2000 [Page 50]Internet Draft Distributed Management Event MIB 7 June 2000mteTriggerFalling,mteTriggerFailure,mteEventSetFailure}STATUS currentDESCRIPTION"Notifications."::= { dismanEventMIBGroups 6 }ENDExpires 7 December 2000 [Page 51]Internet Draft Distributed Management Event MIB 7 June 20009. Intellectual PropertyThe IETF takes no position regarding the validity or scope of anyintellectual property or other rights that might be claimed to pertainto the implementation or use of the technology described in thisdocument or the extent to which any license under such rights might ormight not be available; neither does it represent that it has made anyeffort to identify any such rights. Information on the IETF'sprocedures with respect to rights in standards-track and standards-related documentation can be found in BCP-11. Copies of claims ofrights made available for publication and any assurances of licenses tobe made available, or the result of an attempt made to obtain a generallicense or permission for the use of such proprietary rights byimplementors or users of this specification can be obtained from theIETF Secretariat.The IETF invites any interested party to bring to its attention anycopyrights, patents or patent applications, or other proprietary rightswhich may cover technology that may be required to practice thisstandard. Please address the information to the IETF ExecutiveDirector.Expires 7 December 2000 [Page 52]Internet Draft Distributed Management Event MIB 7 June 200010. AcknowledgementsThis MIB contains considerable contributions from the RMON MIB, theDistributed Management Design Team (Andy Bierman, Maria Greene, BobStewart, and Steve Waldbusser), the Distributed Management WorkingGroup, and colleagues at Cisco.Expires 7 December 2000 [Page 53]Internet Draft Distributed Management Event MIB 7 June 200011. References[RFC2571] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecturefor Describing SNMP Management Frameworks", RFC 2571, April1999[RFC1155] Rose, M., and K. McCloghrie, "Structure and Identificationof Management Information for TCP/IP-based Internets", STD16, RFC 1155, May 1990[RFC1212] Rose, M., and K. McCloghrie, "Concise MIB Definitions", STD16, RFC 1212, March 1991[RFC1215] M. Rose, "A Convention for Defining Traps for use with theSNMP", RFC 1215, March 1991[RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J.,Rose, M., and S. Waldbusser, "Structure of ManagementInformation Version 2 (SMIv2)", STD 58, RFC 2578, April 1999[RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J.,Rose, M., and S. Waldbusser, "Textual Conventions forSMIv2", STD 58, RFC 2579, April 1999[RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J.,Rose, M., and S. Waldbusser, "Conformance Statements forSMIv2", STD 58, RFC 2580, April 1999[RFC1157] Case, J., Fedor, M., Schoffstall, M., and J. Davin, "SimpleNetwork Management Protocol", STD 15, RFC 1157, May 1990.[RFC1901] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser,"Introduction to Community-based SNMPv2", RFC 1901, January1996.[RFC1906] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser,"Transport Mappings for Version 2 of the Simple NetworkManagement Protocol (SNMPv2)", RFC 1906, January 1996.[RFC2572] Case, J., Harrington D., Presuhn R., and B. Wijnen, "MessageProcessing and Dispatching for the Simple Network ManagementProtocol (SNMP)", RFC 2572, April 1999[RFC2574] Blumenthal, U., and B. Wijnen, "User-based Security Model(USM) for version 3 of the Simple Network ManagementExpires 7 December 2000 [Page 54]Internet Draft Distributed Management Event MIB 7 June 2000Protocol (SNMPv3)", RFC 2574, April 1999[RFC1905] Case, J., McCloghrie, K., Rose, M., and S. Waldbusser,"Protocol Operations for Version 2 of the Simple NetworkManagement Protocol (SNMPv2)", RFC 1905, January 1996.[RFC2573] Levi, D., Meyer, P., and B. Stewart, "SNMPv3 Applications",RFC 2573, April 1999[RFC2575] Wijnen, B., Presuhn, R., and K. McCloghrie, "View-basedAccess Control Model (VACM) for the Simple NetworkManagement Protocol (SNMP)", RFC 2575, April 1999[RFC2570] Case, J., Mundy, R., Partain, D., and B. Stewart,"Introduction to Version 3 of the Internet-standard NetworkManagement Framework", RFC 2570, April 1999[RFC1903] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser,"Coexistence between Version 1 and version 2 of theInternet-standard Network Management Framework", RFC 1903,January 1996.[RFCEventMIB]Stewart, B., "Event MIB", RFC ????, ?Month? 1999.[RFC1757]Waldbusser, S., "Remote Network Monitoring Management InformationBase", RFC 1757, February 1995.[RFC1451]Case, J., McCloghrie, K., Rose, M., Waldbusser, S., "Manager-to-Manager Management Information Base", RFC 1451, April 1993.[RFCExpressionMIB]Stewart, B., "Expression MIB", RFC ????, ?Month? 1999.[RFCNotificationLogMIB]Stewart, B., "Notification Log MIB", RFC ????, ?Month? 1999.Expires 7 December 2000 [Page 55]Internet Draft Distributed Management Event MIB 7 June 200012. Security ConsiderationsSecurity issues are discussed in the Security section and in theDESCRIPTION clauses of relevant objects.13. Author's AddressBob StewartCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706U.S.A.14. Editor's AddressRamanathan KavasseriCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706U.S.A.Phone: +1 408 527 2446Email: ramk@cisco.comExpires 7 December 2000 [Page 56]Internet Draft Distributed Management Event MIB 7 June 200015. Full Copyright StatementCopyright (C) The Internet Society (2000). All Rights Reserved.This document and translations of it may be copied and furnished toothers, and derivative works that comment on or otherwise explain it orassist in its implementation may be prepared, copied, published anddistributed, in whole or in part, without restriction of any kind,provided that the above copyright notice and this paragraph are includedon all such copies and derivative works. However, this document itselfmay not be modified in any way, such as by removing the copyright noticeor references to the Internet Society or other Internet organizations,except as needed for the purpose of developing Internet standards inwhich case the procedures for copyrights defined in the InternetStandards process must be followed, or as required to translate it intolanguages other than English.The limited permissions granted above are perpetual and will not berevoked by the Internet Society or its successors or assigns.This document and the information contained herein is provided on an "ASIS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASKFORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOTLIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOTINFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY ORFITNESS FOR A PARTICULAR PURPOSE.Expires 7 December 2000 [Page 57]Internet Draft Distributed Management Event MIB 7 June 2000Table of Contents1 Abstract ........................................................ 22 The SNMP Management Framework ................................... 23 Overview ........................................................ 44 Relationship to Other MIBs ...................................... 45 MIB Sections .................................................... 46 Operation ....................................................... 77 Security ........................................................ 88 Definitions ..................................................... 99 Intellectual Property ........................................... 5210 Acknowledgements ............................................... 5311 References ..................................................... 5412 Security Considerations ........................................ 5613 Author's Address ............................................... 5614 Editor's Address ............................................... 5615 Full Copyright Statement ....................................... 57Expires 7 December 2000 [Page 58]

