Table Of Contents
Notification MIB
Notification MIB
The CISCO-EPM-NOTIFICATION-MIB specifies the trap message format Cisco Unified Operations Manager (Operations Manager) uses to generate SNMP traps when an alert occurs. The trap includes the attributes of the alert and the events that caused the alert.
This topic includes the following information:
•
MIB Definition
•
cenAlarmEntry Object-Type—Definitions for Selected Attributes
•
cenUserMessage1 Object-Type—Attribute with Partition Information
MIB Definition
CISCO-EPM-NOTIFICATION-MIB DEFINITIONS ::= BEGIN
OBJECT-TYPE FROM SNMPv2-SMI
OBJECT-GROUP FROM SNMPv2-CONF
SnmpAdminString FROM SNMP-FRAMEWORK-MIB
InetAddress FROM INET-ADDRESS-MIB
ciscoEpmNotificationMIB MODULE-IDENTITY
LAST-UPDATED "200406070000Z"
ORGANIZATION "Cisco Systems, Inc."
CONTACT-INFO "Cisco Systems
Postal: 170 W Tasman Drive
"Notifications directly from hardware and software and processed
notifications from various management applications can be further
processed and forwarded by still other management applications to
indicate the status of devices and software (managed objects).
The status of these managed objects can be reported by traps.
The CISCO-EPM-NOTIFICATION-MIB contains the trap structure which
carries the identity and status info of the managed object as
analyzed by such an event processor. It is not possible for
receivers of these traps to query the mib objects.
A unique but optional feature of the application generating the
trap defined in this mib is the ability to contain multiple
partitions in the same system running the application. A
'Partition' is a logical grouping of a set of managed devices.
These devices can belong to only one partition at any given
time. The trap structure will contain information on the exact
partition number and the partition name of the device where it
The need for trap generation is to enable multiple management
applications in the network to have a consolidated view of the
whole network of Cisco and non-Cisco devices."
"Updated the cenAlarmEntry to include new attributes. The new
attributes carries information that adds more value to the already
The Management application computes events for a device via
polling snmp mib objects on the device and/or by listening to
SNMP Traps. Multiple events on a single device roll up into what
is called an Alert - there can be only one alert for a given
device at any given time. The objects contained in the
cenAlarmEntry are the same for both Alert and Event based
notification. The attribute cenAlarmMode added in this revision
of the mib can be used to distinguish between the Alert based and
event based notification.
In case of event based notification, the cenAlertID would contain
the alert id, as computed by the management system, to which the
generated event has been rolled up.
Traps generated from systems that support mutiple Partition, the
cenPartitionNumber and cenPartitionName attributes will carry the
exact partition details of the device for which the trap is
Through the management application user interface, the user can
customize few attributes of the trap structure. Two attributes
included in this mib revision that allows the user to customize
each trap sent out are cenCustomerIdentification and
ciscoEpmNotificationObjectsGroup, ciscoEpmNotificationAlarm, and
ciscoEpmNotificationMIBCompliance have been deprecated in this
ciscoEpmNotificationAlarmRev1,
ciscoEpmNotificationAlarmGroupRev1,
ciscoEpmNotificationMIBComplianceRev1,
and ciscoEpmNotificationObjectsGroupRev1 have been newly created
"Included imports for Integer32, Unsigned32, and
"Initial version of this MIB."
-- MIB Object Definitions
ciscoEpmNotificationMIBNotifs OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIB 0 }
ciscoEpmNotificationMIBObjects OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIB 1 }
ciscoEpmNotificationMIBConform OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIB 2 }
cenAlarmData OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIBObjects 1}
cenAlarmTableMaxLength OBJECT-TYPE
SYNTAX Unsigned32 ( 1..4294967295 )
"Maximum number of entries permissible in the cenAlarmTable."
cenAlarmTable OBJECT-TYPE
SYNTAX SEQUENCE OF CenAlarmEntry
MAX-ACCESS not-accessible
"A table containing the device identification and
alarm value. The maximum number of entries permissible
in this table is defined by cenAlarmTableMaxLength. When
the number of entries in the table reaches the maximum
limit, the next entry would replace the oldest existing
cenAlarmEntry OBJECT-TYPE
MAX-ACCESS not-accessible
"The information regarding a single device status alarm.
An entry is created when an alarm is processed."
cenAlarmIndex Unsigned32,
cenAlarmVersion SnmpAdminString,
cenAlarmTimestamp TimeStamp,
cenAlarmUpdatedTimestamp TimeStamp,
cenAlarmInstanceID SnmpAdminString,
cenAlarmStatus Integer32,
cenAlarmStatusDefinition SnmpAdminString,
cenAlarmCategory Integer32,
cenAlarmCategoryDefinition SnmpAdminString,
cenAlarmServerAddressType InetAddressType,
cenAlarmServerAddress InetAddress,
cenAlarmManagedObjectClass SnmpAdminString,
cenAlarmManagedObjectAddressType InetAddressType,
cenAlarmManagedObjectAddress InetAddress,
cenAlarmDescription OCTET STRING,
cenAlarmSeverity Integer32,
cenAlarmSeverityDefinition SnmpAdminString,
cenAlarmTriageValue Integer32,
cenEventIDList OCTET STRING,
cenUserMessage1 SnmpAdminString,
cenUserMessage2 SnmpAdminString,
cenUserMessage3 SnmpAdminString,
cenPartitionNumber Unsigned32,
cenPartitionName SnmpAdminString,
cenCustomerIdentification SnmpAdminString,
cenCustomerRevision SnmpAdminString,
cenAlertID SnmpAdminString
cenAlarmIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
"A monotonically increasing integer for the sole
purpose of indexing the attributes in
ciscoEpmNotificationMIBObjects. When the maximum value is
reached, this value wraps back to 1."
cenAlarmVersion OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..16))
"The release version of this MIB. The version string will
be of the form <major version>.<minorversion>."
cenAlarmTimestamp OBJECT-TYPE
"The time when the alarm was raised."
cenAlarmUpdatedTimestamp OBJECT-TYPE
"Alarms persist over time and can have their field(s)
change values. The last time a field(s) changed, this
alarm is updated. The updated time denotes this time.
Each alarm is identified by the unique alarm instance
cenAlarmInstanceID OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..20))
"The Unique Alarm Instance ID."
cenAlarmStatus OBJECT-TYPE
SYNTAX Integer32 (1..250)
"The alarm status indicates the status of the alarm
cenAlarmStatusDefinition OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"The short description of the status of the alarm.
The string is formatted in
'<integer>,<alarmStatus description>' tuples. The <integer>
value is the same value that the 'cenAlarmStatus'
attribute holds. <alarmStatus description> contains one line
description of the alarm status generated."
"unknown: When the value for this attribute could not be
direct: Denotes an alarm generated by a set of events where
all events are reported by an observation(s) of a
indirect: Denotes an alarm generated by a set of events where
all events were deduced or inferred by the status of
managed objects as determined by the network
mixed: Denotes an alarm generated by a set of events which
were either direct or indirect."
cenAlarmCategory OBJECT-TYPE
SYNTAX Integer32 (1..250)
"The category of the alarm generated represented in
cenAlarmCategoryDefinition OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"The short description of the category of the alarm
generated. The String is formatted in
'<integer>,<alarmCategory description>' tuples. The <integer>
value is the same value that the 'cenAlarmCategory'
attribute holds. <alarmCategory description> contains one
line description of the alarm category generated."
cenAlarmServerAddressType OBJECT-TYPE
"The type of Internet address by which the server
is reachable. The Server is the server
that is generating this trap."
cenAlarmServerAddress OBJECT-TYPE
"The IP Address or the DNS name of the Management
Server that raised this alarm to be notified."
cenAlarmManagedObjectClass OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"The class of the managed object for which this
alarm was generated. For example, Router, Switch,
GateKeeper and VoicePort."
cenAlarmManagedObjectAddressType OBJECT-TYPE
"The type of Internet address by which the managed
cenAlarmManagedObjectAddress OBJECT-TYPE
"The IP Address or the DNS name of the Managed Object."
cenAlarmDescription OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(1..1024))
"A detailed description of the alarm."
cenAlarmSeverity OBJECT-TYPE
SYNTAX Integer32 (0..100)
"The alarm severity indicates the severity of the alarm
cenAlarmSeverityDefinition OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"The short description of the severity of the alarm
generated. The String is formatted in
'<integer>,<alarmSeverity description>' tuples. The <integer>
value is the same value that the 'cenAlarmSeverity '
attribute holds. <alarmSeverity description> contains one line
description of the alarm severity generated."
cenAlarmTriageValue OBJECT-TYPE
"The triage value of an alarm is a hierarchical weighting value
(applied by the application, and more importantly customizable
by the end user) to allow an artificial form of evaluating
impact, interest, or other user-determined functions between
alarms. The value is a positive number or zero where zero
denotes an undetermined or uncomputable value."
cenEventIDList OBJECT-TYPE
SYNTAX OCTET STRING (SIZE(1..1024))
"Comma separated list of the Unique Event identifiers
that led to the generation of this Alarm."
cenUserMessage1 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"User input message. This value can be configured."
cenUserMessage2 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"User input message. This value can be configured."
cenUserMessage3 OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"User input message. This value can be configured."
"unknown: When the value for this attribute could not be
alert: Denotes an alarm generated by a set of events where
all events are reported by polling of managed
objects and/or listening to SNMP notifications.
event: Denotes an event generated by polling of managed
ojects and/or listening to SNMP notifications."
cenPartitionNumber OBJECT-TYPE
SYNTAX Unsigned32(0..100)
"In traps generated by the management application that support
multiple partitions, the attribute will carry the integer
value assigned to identify the logical group where the managed
cenPartitionName OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"In traps generated by the management application that support
multiple partitions, the attribute will carry the name
assigned to identify the logical group where the managed
cenCustomerIdentification OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"User input message. The attribute takes in a free format
text. This attribute can be used by advanced management
applications to sort responses from the fault management
cenCustomerRevision OBJECT-TYPE
SYNTAX SnmpAdminString (SIZE(1..255))
"User input message. The attribute takes in a free format
text. This attribute can be used by advanced management
applications to sort responses from the fault management
SYNTAX SnmpAdminString (SIZE(1..20))
"In event based notification, this attribute will contain the
alert id to which the generated event has been rolled up
to. In alert based notification, the cenAlarmInstanceId and
cenAlertID would be identical."
ciscoEpmNotificationAlarm NOTIFICATION-TYPE
cenAlarmUpdatedTimestamp,
cenAlarmStatusDefinition,
cenAlarmCategoryDefinition,
cenAlarmServerAddressType,
cenAlarmManagedObjectClass,
cenAlarmManagedObjectAddressType,
cenAlarmManagedObjectAddress,
cenAlarmSeverityDefinition,
"Notification of the status of the managed object as
generated by the management server.
New attributes are added to the ciscoEpmNotificationAlarmRev1.
Hence this notification is deprecated."
::= { ciscoEpmNotificationMIBNotifs 1 }
ciscoEpmNotificationAlarmRev1 NOTIFICATION-TYPE
cenAlarmUpdatedTimestamp,
cenAlarmStatusDefinition,
cenAlarmCategoryDefinition,
cenAlarmServerAddressType,
cenAlarmManagedObjectClass,
cenAlarmManagedObjectAddressType,
cenAlarmManagedObjectAddress,
cenAlarmSeverityDefinition,
cenCustomerIdentification,
"Notification of the status of the managed object as
generated by the management server."
::= { ciscoEpmNotificationMIBNotifs 2 }
-- Conformance information
ciscoEpmNotificationMIBCompliances OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIBConform 1 }
ciscoEpmNotificationMIBGroups OBJECT IDENTIFIER
::= { ciscoEpmNotificationMIBConform 2 }
ciscoEpmNotificationMIBCompliance MODULE-COMPLIANCE
"The compliance statement for entities which
implement the CISCO-EPM-NOTIFICATION-MIB.
New attributes are included in
ciscoEpmNotificationMIBComplianceRev1. Hence this object is
ciscoEpmNotificationObjectsGroup,
ciscoEpmNotificationAlarmGroup
GROUP ciscoEpmAlarmConfigGroup
"This group is optional."
OBJECT cenAlarmTableMaxLength
"Write access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmUpdatedTimestamp
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmInstanceID
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmStatusDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmCategoryDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmServerAddressType
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmServerAddress
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectClass
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectAddressType
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectAddress
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmDescription
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmSeverityDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmTriageValue
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
::= { ciscoEpmNotificationMIBCompliances 1 }
ciscoEpmNotificationMIBComplianceRev1 MODULE-COMPLIANCE
"The compliance statement for entities which
implement the CISCO-EPM-NOTIFICATION-MIB."
ciscoEpmNotificationObjectsGroupRev1,
ciscoEpmNotificationAlarmGroupRev1
GROUP ciscoEpmAlarmConfigGroup
"This group is optional."
OBJECT cenAlarmTableMaxLength
"Write access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmUpdatedTimestamp
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmInstanceID
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmStatusDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmCategoryDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmServerAddressType
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmServerAddress
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectClass
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectAddressType
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmManagedObjectAddress
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmDescription
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmSeverityDefinition
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenAlarmTriageValue
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenPartitionNumber
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenCustomerIdentification
MIN-ACCESS accessible-for-notify
"Read access is not required."
OBJECT cenCustomerRevision
MIN-ACCESS accessible-for-notify
"Read access is not required."
MIN-ACCESS accessible-for-notify
"Read access is not required."
::= { ciscoEpmNotificationMIBCompliance 2 }
ciscoEpmNotificationAlarmGroup NOTIFICATION-GROUP
ciscoEpmNotificationAlarm
"The collection of notifications used to indicate managed
ciscoEpmNotificationAlarmGroupRev1 is defined. Hence this
::= { ciscoEpmNotificationMIBGroups 1 }
ciscoEpmNotificationObjectsGroup OBJECT-GROUP
cenAlarmUpdatedTimestamp,
cenAlarmStatusDefinition,
cenAlarmCategoryDefinition,
cenAlarmServerAddressType,
cenAlarmManagedObjectClass,
cenAlarmManagedObjectAddressType,
cenAlarmManagedObjectAddress,
cenAlarmSeverityDefinition,
"Trap reflecting the alarm.
New attributes are added to the new notification
ciscoEpmNotificationObjectsGroupRev1. Hence
this object is deprecated."
::= { ciscoEpmNotificationMIBGroups 2 }
ciscoEpmAlarmConfigGroup OBJECT-GROUP
OBJECTS { cenAlarmTableMaxLength }
"A collection of objects providing information
about the total number of cenAlarmTable entries
::= { ciscoEpmNotificationMIBGroups 3 }
ciscoEpmNotificationAlarmGroupRev1 NOTIFICATION-GROUP
ciscoEpmNotificationAlarmRev1
"The collection of notifications used to indicate managed object
::= { ciscoEpmNotificationMIBGroups 4 }
ciscoEpmNotificationObjectsGroupRev1 OBJECT-GROUP
cenAlarmUpdatedTimestamp,
cenAlarmStatusDefinition,
cenAlarmCategoryDefinition,
cenAlarmServerAddressType,
cenAlarmManagedObjectClass,
cenAlarmManagedObjectAddressType,
cenAlarmManagedObjectAddress,
cenAlarmSeverityDefinition,
cenCustomerIdentification,
"Notification reflecting the alarm."
::= { ciscoEpmNotificationMIBGroups 5 }
cenAlarmEntry Object-Type—Definitions for Selected Attributes
Table D-1 explains the values for attributes related to alert status, category, and severity. You might find it useful to consult this information when you look at a generated trap.
Table D-1 CenAlarmEntry—Alert Status, Category, and Severity
Sequence Numbers
|
Attributes
|
Values
|
(6)
(7)
|
cenAlarmStatus
cenAlarmStatusDefinition
|
Number—From 1 to 3.
String—Includes number (cenAlarmStatus) and description:
1-Acknowledged
2-Active
3-Cleared
Note Alert status changes from state to state: state is Active; if user acknowledges alert, state is Acknowledged; ultimately, state is Cleared. For more information about alerts, see Chapter 3, "Monitoring Alerts and Events."
|
(9)
(10)
|
cenAlarmCategory
cenAlarmCategoryDefinition
|
Number—From 0 to 9.
String—Includes number (cenAlarmCategory) and description:
0-Unknown
1-Application
2-Environment
3-Interface
4-Reachability
5-Connectivity
6-Utilization
7-System Hardware
8-Security
9-Other
|
(17)
(18)
|
cenAlarmSeverity
cenAlarmSeverityDefinition
|
Number—From 1 to 3.
String—Includes number (cenAlarmSeverity) and description:
1-Informational
2-Warning
3-Critical
|
cenUserMessage1 Object-Type—Attribute with Partition Information
Operations Manager stores the partition number and alias for the identified device in the cenUserMessage1 object-type. The partition number and alias are separated by a colon; for example, Partition 1: Enterprise1. This information is no longer relevant.