MonitorWare Knowledge Base

I have downloaded the newest version of winsyslog, version 8, and am trying to configure SNMP Traps. Where do I import the MIBS from my device into? The vendor is F5 and they have there own MIBS that I need. I have copied it into the MIBS subfolder and when I refresh the view I still can't find them.

Hi,

so far what you have done is correct. Nothing more is needed to import the mibs. But it may is not easy to find the new mibs in the mib tree.

If you would send your mibs to support@adiscon.com I could check where these mibs can be found in the tree view.

best regards,
Andre Lorbach

Folks,
I am currently running WinSyslog 8.0.451 and I have it loaded on a
Windows 2003 server. I want the WinSyslog to act as the SNMP Trap receiver
and send out an e-mail when certain traps occur. Where I am getting
confused is when I create a ruleset. I have successfully loaded the F5
MIBS.

I have created a new RULESET and named it SNMP. In the rule set I
have created an E-Mail action and in the SNMP Trap Receiver service
I have chosen the new SNMP Ruleset as the ruleset to use. The
device I am testing with right now is an F5 GTM server which I have
configured to send the SNMP traps to the 2003 server via port 162 using
SNMP v2c. The problem I am having is twofold.

1 - Where do I define what traps to send an e-mail about
2 - When I reboot the GTM device I do not get an e-mail, although
I assume it is because I can't find where to set anything. The only place
I have found where I can define the trap is if I create and
a ruleset to Send SNMPTrap, which is not what I want. I
assume that this is when the 2003 server send the trap to F5 not to an
e-mail. I have looked through the guide but it is really cryptic. I have tried all of those steps and yet nothing.

I would GREATLY appreciate any assistance you can provide.

Thank you,
Sergio Harnais - MCSE, CISSP

Dear Sergio,

I am sorry for the delayed response.
Filtering for SNMP Traps is a bit difficult as the SNMP variables are translated / converted into the WinSyslog Property Framework.

So you need to filter by specific property names in the filter view of your rule(s). But first of all I recommend to test if SNMP traps are successfully received. Kindly create a Rule with a Forward Syslog Action (Port 10514) and run the Interactive Syslog Server in order to see the forwarded syslog messages.

When you verified that WinSyslog receives the SNMP Traps successfully, take a look to the message. It will contain the property variable names and so on. You may can use the inbuild SNMP Filters, but it is also possible that you have to use the Custom Filter and specify the snmp variable name.

best regards,
Andre Lorbach