CISCO-EMBEDDED-EVENT-MGR-MIB

All MIBs › CISCO-EMBEDDED-EVENT-MGR-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2006-11-07

Category: Cisco Devices, Device Management

Description: Manages Cisco Embedded Event Manager (EEM) policies and applets, monitoring event detection triggers and automated action execution.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-EMBEDDED-EVENT-MGR-MIB?

CISCO-EMBEDDED-EVENT-MGR-MIB describes events generated by Cisco's Embedded Event Manager (EEM), a policy-driven framework that detects hardware and software faults and other system events (such as online insertion/removal) and can trigger automated recovery actions. It exposes an event-map table describing configured event definitions, plus a history table logging past events with type and timestamp information, alongside notification objects for real-time alerting. It is explicitly a fault/event-monitoring MIB covering both hardware and software conditions: it lets an operator see which faults have been detected system-wide and confirm that EEM's automated fault-recovery policies are firing as configured, effectively surfacing hardware/software health issues through a unified eventing layer. It depends on the specific subsystem MIBs that generate the underlying conditions EEM reports on (interface, environmental, process MIBs, etc.), since EEM itself is a meta-layer over those faults. It is deployed on Cisco routers and switches wherever policy-driven automated fault detection and recovery is configured. Engineers can download the CISCO-EMBEDDED-EVENT-MGR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-EMBEDDED-EVENT-MGR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco router
Cisco switch

Monitoring Examples

An operator would walk ceemHistoryEventTable/ceemHistoryEventEntry, keyed by ceemHistoryEventIndex, to review ceemHistoryEventType1/ceemHistoryEventType2 for recent recorded events and correlate them against ceemEventMapTable/ceemEventMapEntry (ceemEventName, ceemEventDescrText) to understand which configured policy triggered each entry. Watching ceemHistoryLastEventEntry update unexpectedly frequently would indicate a flapping condition repeatedly triggering the same EEM policy, such as a hardware fault or process crash loop. Receiving a cEventMgrMIBNotif trap tied to a specific ceemEventIndex would let an operator immediately identify which fault-recovery policy fired.

What Can Be Monitored

configured EEM event definitions
event history log entries
event type and description
last recorded event
event notification triggers

Imported Objects

From CISCO-SMI

ciscoExperiment

OBJECT-IDENTITY

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using ceemRegisteredPolicyRunCount OID:

Select a Cisco router or switch (Embedded Event Manager) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type ceemRegisteredPolicyRunCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of times the policy has been run. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
cEventMgrMIB	1.3.6.1.4.1.9.10.134			The MIB module to describe and store events generated by the Cisco Embedded Event Manager. The Cisco Embedded Event Manager detects hardware and software faults, and other events (such as OIRs) for the system. It also enables users to configure fault recovery services for system wide components. The Embedded Event Manager also provides process reliability statistics. The Embedded Event Manager is a policy driven process through which faults in the system are reported through a defined API. The Embedded Event Manager policy engine receives notifications when faults and other events occur. Embedded Event Manager policies implement recovery based on the current state of the system and the actions specified in the policy for a given event. Recovery actions are triggered when the policy is run. Developers write and customize Embedded Event Manager policies to handle faults and events.
cEventMgrMIBNotif	1.3.6.1.4.1.9.10.134.0
NTF cEventMgrServerEvent	1.3.6.1.4.1.9.10.134.0.1			This notification is sent by the Embedded Event Manager server after it has run a policy associated with the event ceemHistoryEventType that was received.
NTF cEventMgrPolicyEvent	1.3.6.1.4.1.9.10.134.0.2			This notification is configured to be sent from within an Embedded Event Manager policy after an Embedded Event Manager event ceemHistoryEventType has occurred. If one or more of the objects ceemHistoryPolicyIntData1, ceemHistoryPolicyIntData2, and ceemHistoryPolicyStrData are not instantiated, then the varbind for the object(s) not instantiated will contain the value 'noSuchInstance'.
cEventMgrMIBObjects	1.3.6.1.4.1.9.10.134.1
ceemEventMap	1.3.6.1.4.1.9.10.134.1.1
ceemEventMapTable	1.3.6.1.4.1.9.10.134.1.1.1		not-accessible	A table containing information about ceemEventIndex value mapping. Each conceptual row specifies a unique mapping between a ceemEventIndex value, and a Embedded Event Manager event type. Rows are added dynamically as the Embedded Event Manager server learns of new event types. This occurs when Embedded Event Manager Event Detectors register with the Embedded Event Manager server.
ceemEventMapEntry	1.3.6.1.4.1.9.10.134.1.1.1.1		not-accessible	A mapping between an event type and an event description.
U32 ceemEventIndex	1.3.6.1.4.1.9.10.134.1.1.1.1.1	Unsigned32	not-accessible	This object uniquely identifies an event. Events are not persisted across reloads.
STR ceemEventName	1.3.6.1.4.1.9.10.134.1.1.1.1.2	SnmpAdminString	read-only	The name of the Embedded Event Manager event.
STR ceemEventDescrText	1.3.6.1.4.1.9.10.134.1.1.1.1.3	SnmpAdminString	read-only	This object specifies a human-readable message describing information about the Embedded Event Manager event.
ceemHistory	1.3.6.1.4.1.9.10.134.1.2
I32 ceemHistoryMaxEventEntries	1.3.6.1.4.1.9.10.134.1.2.1	Integer32	read-write	The maximum number of entries that can be held in ceemHistoryEventTable.
U32 ceemHistoryLastEventEntry	1.3.6.1.4.1.9.10.134.1.2.2	Unsigned32	read-only	Index of last entry created in ceemHistoryEventTable.
ceemHistoryEventTable	1.3.6.1.4.1.9.10.134.1.2.3		not-accessible	A table of Embedded Event Manager events generated by this router. Conceptual row entries are dynamically added into this table when Embedded Event Manager events occur. Entries are stored in FIFO order. When the maximum number of entries has been reached in the table, the oldest entry in the table is removed immediately. When a table is reduced to a smaller size N, the oldest entries are immediately removed from the table leaving a maximum of N entries.
ceemHistoryEventEntry	1.3.6.1.4.1.9.10.134.1.2.3.1		not-accessible	Information about an Embedded Event Manager event which has been generated by this router. It provides up to four event types to support complex event specifications that are triggered when multiple events are published within a certain period of time.
U32 ceemHistoryEventIndex	1.3.6.1.4.1.9.10.134.1.2.3.1.1	Unsigned32	not-accessible	A monotonically increasing non-zero integer uniquely identifying a generated event. When it reaches the maximum value, the agent wraps the value back to 1 and may flush all existing entries in the event table.
U32 ceemHistoryEventType1	1.3.6.1.4.1.9.10.134.1.2.3.1.2	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType2	1.3.6.1.4.1.9.10.134.1.2.3.1.3	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType3	1.3.6.1.4.1.9.10.134.1.2.3.1.4	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType4	1.3.6.1.4.1.9.10.134.1.2.3.1.5	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
STR ceemHistoryPolicyPath	1.3.6.1.4.1.9.10.134.1.2.3.1.6	SnmpAdminString	read-only	The file path on the router where the Embedded Event Manager policy that was triggered is stored. If the size of the file path string is larger than 128, the end characters will be truncated.
STR ceemHistoryPolicyName	1.3.6.1.4.1.9.10.134.1.2.3.1.7	SnmpAdminString	read-only	The name of the Embedded Event Manager policy that was triggered because of an Embedded Event Manager event. The name must be a valid Embedded Event Manager policy name. It must be in the form of a valid Posix filename.
I32 ceemHistoryPolicyExitStatus	1.3.6.1.4.1.9.10.134.1.2.3.1.8	Integer32	read-only	The exit status of the Embedded Event Manager policy execution. This value corresponds to the Posix process exit status.
I32 ceemHistoryPolicyIntData1	1.3.6.1.4.1.9.10.134.1.2.3.1.9	Integer32	read-only	Arbitrary integer data that the Embedded Event Manager policy can use. Use of this object is optional. If unused by a policy, this object will not be instantiated for that policy.
I32 ceemHistoryPolicyIntData2	1.3.6.1.4.1.9.10.134.1.2.3.1.10	Integer32	read-only	Arbitrary integer data that the Embedded Event Manager policy can use. Use of this object is optional. If unused by a policy, this object will not be instantiated for that policy.
STR ceemHistoryPolicyStrData	1.3.6.1.4.1.9.10.134.1.2.3.1.11	SnmpAdminString	read-only	Arbitrary string data the Embedded Event Manager policy can use. Use of this object is optional. If unused by a policy, this object will not be instantiated for that policy.
NOT ceemHistoryNotifyType	1.3.6.1.4.1.9.10.134.1.2.3.1.12	NotifySource	read-only	The notification type that was sent from the Embedded Event Manager. The valid values are server or policy.
U32 ceemHistoryEventType5	1.3.6.1.4.1.9.10.134.1.2.3.1.13	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType6	1.3.6.1.4.1.9.10.134.1.2.3.1.14	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType7	1.3.6.1.4.1.9.10.134.1.2.3.1.15	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
U32 ceemHistoryEventType8	1.3.6.1.4.1.9.10.134.1.2.3.1.16	Unsigned32	read-only	The type of Embedded Event Manager event which was detected. The value corresponds to an entry in the ceemEventTable.
ceemRegisteredPolicy	1.3.6.1.4.1.9.10.134.1.3
ceemRegisteredPolicyTable	1.3.6.1.4.1.9.10.134.1.3.1		not-accessible	A table of Embedded Event Manager policies registered on a system. The number of entries depends on the configuration of the system. The maximum number is implementation dependent.
ceemRegisteredPolicyEntry	1.3.6.1.4.1.9.10.134.1.3.1.1		not-accessible	An entry in the table of Embedded Event Manager policies that are registered. It provides up to four event types to support complex event specifications that are triggered when multiple events are published within a certain period of time. A row in this table cannot be created or deleted by SNMP operations on columns of the table.
U32 ceemRegisteredPolicyIndex	1.3.6.1.4.1.9.10.134.1.3.1.1.1	Unsigned32	not-accessible	A monotonically increasing non-zero integer uniquely identifying a policy registration. When it reaches the maximum value, the agent wraps the value back to 1 upon receiving the next policy registration.
STR ceemRegisteredPolicyName	1.3.6.1.4.1.9.10.134.1.3.1.1.2	SnmpAdminString	read-only	The name of the Embedded Event Manager policy that was registered. The name must be a valid Embedded Event Manager policy name. It must be in the form of a valid Posix filename.
U32 ceemRegisteredPolicyEventType1	1.3.6.1.4.1.9.10.134.1.3.1.1.3	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType2	1.3.6.1.4.1.9.10.134.1.3.1.1.4	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType3	1.3.6.1.4.1.9.10.134.1.3.1.1.5	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType4	1.3.6.1.4.1.9.10.134.1.3.1.1.6	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
INT ceemRegisteredPolicyStatus	1.3.6.1.4.1.9.10.134.1.3.1.1.7	INTEGER	read-only	This status indicates whether the policy is enabled or disabled.
INT ceemRegisteredPolicyType	1.3.6.1.4.1.9.10.134.1.3.1.1.8	INTEGER	read-only	This variable indicates whether this is a user or system policy.
T/F ceemRegisteredPolicyNotifFlag	1.3.6.1.4.1.9.10.134.1.3.1.1.9	TruthValue	read-only	This flag indicates if an SNMP notification will be sent when policy is triggered.
DAT ceemRegisteredPolicyRegTime	1.3.6.1.4.1.9.10.134.1.3.1.1.10	DateAndTime	read-only	The time the policy was registered. It is stored as a 32-bit count of seconds since 0000 UTC, 1 January, 1970.
DAT ceemRegisteredPolicyEnabledTime	1.3.6.1.4.1.9.10.134.1.3.1.1.11	DateAndTime	read-only	The time the policy was last enabled. It is stored as a 32-bit count of seconds since 0000 UTC, 1 January, 1970.
DAT ceemRegisteredPolicyRunTime	1.3.6.1.4.1.9.10.134.1.3.1.1.12	DateAndTime	read-only	The last time the policy was run. It is stored as a 32-bit count of seconds since 0000 UTC, 1 January, 1970.
C32 ceemRegisteredPolicyRunCountEx	1.3.6.1.4.1.9.10.134.1.3.1.1.13	Counter32	read-only	The number of times the policy has been run.
U32 ceemRegisteredPolicyEventType5	1.3.6.1.4.1.9.10.134.1.3.1.1.14	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType6	1.3.6.1.4.1.9.10.134.1.3.1.1.15	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType7	1.3.6.1.4.1.9.10.134.1.3.1.1.16	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
U32 ceemRegisteredPolicyEventType8	1.3.6.1.4.1.9.10.134.1.3.1.1.17	Unsigned32	read-only	The type of Embedded Event Manager event which was registered by the policy. The value corresponds to an entry in the ceemEventMapTable.
cEventMgrConformance	1.3.6.1.4.1.9.10.134.3
cEventMgrCompliances	1.3.6.1.4.1.9.10.134.3.1
cEventMgrCompliance	1.3.6.1.4.1.9.10.134.3.1.1			The implementation requirements for the Embedded Event Manager notification MIB.
cEventMgrComplianceRev1	1.3.6.1.4.1.9.10.134.3.1.2			The implementation requirements for the Embedded Event Manager notification MIB.
cEventMgrGroups	1.3.6.1.4.1.9.10.134.3.2
cEventMgrDescrGroup	1.3.6.1.4.1.9.10.134.3.2.1			A collection of managed objects defining the description of Embedded Event Manager events.
cEventMgrHistoryGroup	1.3.6.1.4.1.9.10.134.3.2.2			Embedded Event Manager event history.
cEventMgrNotificationsGroup	1.3.6.1.4.1.9.10.134.3.2.3			The collection of notifications used to indicate changes to the ceemHistoryTable.
cEventMgrRegisteredPolicyGroup	1.3.6.1.4.1.9.10.134.3.2.4			A collection of managed objects defining the description of Embedded Event Manager registered policies.
cEventMgrHistoryGroupSup1	1.3.6.1.4.1.9.10.134.3.2.5			Addtional history event types 5-8.
cEventMgrRegisteredPolicyGroupSup1	1.3.6.1.4.1.9.10.134.3.2.6			Addtional registered policy event types 5-8.

RFC description

Cisco vendor-specific MIB for Embedded Event Manager (EEM) monitoring, including policy execution and event history.

Start monitoring Cisco routers and switches (Embedded Event Manager) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-EMBEDDED-EVENT-MGR-MIB