CISCO-HC-ALARM-MIB

All MIBs › CISCO-HC-ALARM-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-10-05

Category: Alarm and Event Management, Cisco Devices, Network Monitoring (RMON)

Description: Provides management objects for configuring high-capacity RMON alarms that support 64-bit counter thresholds on Cisco platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-HC-ALARM-MIB?

CISCO-HC-ALARM-MIB is a Cisco private MIB implementing High Capacity RMON alarms, based on the IETF Internet-Draft draft-ietf-rmonmib-hc-alarm-mib and created because that draft was subject to change; Cisco expected it might later be superseded by an RFC. It extends classic RMON alarm functionality to 64-bit counters via cHcAlarmTable, where each entry (indexed by cHcAlarmIndex) names an arbitrary sampled variable through cHcAlarmVariable (a VariablePointer), stores the absolute sampled value in cHcAlarmAbsValue (a CounterBasedGauge64), and tracks sign/validity via the CHcValueStatus convention (valueNotAvailable, valuePositive, valueNegative). Rising and falling thresholds are similarly split into high/low absolute-value pairs (cHcAlarmRisingThreshAbsValueLo/Hi, cHcAlarmFallingThreshAbsValueLo/Hi) with their own status objects, and each alarm links to rising/falling RMON event indexes (cHcAlarmRisingEventIndex, cHcAlarmFallingEventIndex) that fire when thresholds are crossed. It depends on RMON-MIB (for rmonEventGroup and OwnerString) and HCNUM-TC for the 64-bit gauge type, and is deployed on Cisco platforms needing threshold monitoring on counters too large for classic 32-bit RMON alarms, per the CISCO-HC-ALARM-MIB MIB.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-HC-ALARM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco platforms supporting High Capacity RMON alarms

Monitoring Examples

An operator configures a cHcAlarmTable entry with cHcAlarmVariable pointing at a high-speed interface's 64-bit octet counter and sets cHcAlarmRisingThreshAbsValueHi to a bandwidth ceiling; a subsequent rise past that threshold fires the linked cHcAlarmRisingEventIndex, and a growing cHcAlarmValueFailedAttempts counter alongside valueNotAvailable(1) in cHcAlarmValueStatus would indicate the sampled variable has become unreachable, invalidating the alarm.

What Can Be Monitored

64-bit sampled alarm absolute values
rising/falling threshold crossing status
linked RMON rising/falling event indexes
sample value validity/sign status
failed sampling attempt counters

Imported Objects

From CISCO-SMI

ciscoExperiment

OBJECT-IDENTITY

From HCNUM-TC

CounterBasedGauge64

From RMON-MIB

OwnerString
rmonEventGroup	OBJECT-GROUP

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
StorageType
TEXTUAL-CONVENTION
VariablePointer

How to Use in IPNetwork Monitor

Example using cHcAlarmValueFailedAttempts OID:

Select a Cisco platform supporting High Capacity RMON alarm as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cHcAlarmValueFailedAttempts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of times the associated cHcAlarmVariable instance was polled on behalf of this cHcAlarmEntry, (while in the active state) and the value was not available. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoHcAlarmMIB	1.3.6.1.4.1.9.10.93			This module defines Remote Monitoring MIB extensions for High Capacity Alarms.
cHcAlarmObjects	1.3.6.1.4.1.9.10.93.1
cHcAlarmControlObjects	1.3.6.1.4.1.9.10.93.1.1
cHcAlarmTable	1.3.6.1.4.1.9.10.93.1.1.1		not-accessible	A list of entries for the configuration of high capacity alarms.
cHcAlarmEntry	1.3.6.1.4.1.9.10.93.1.1.1.1		not-accessible	A conceptual row in the cHcAlarmTable. Entries are usually created in this table by management application action, but may also be created by agent action as well.
I32 cHcAlarmIndex	1.3.6.1.4.1.9.10.93.1.1.1.1.1	Integer32	not-accessible	An arbitrary integer index value used to uniquely identify this high capacity alarm entry.
I32 cHcAlarmInterval	1.3.6.1.4.1.9.10.93.1.1.1.1.2	Integer32	read-create	The interval in seconds over which the data is sampled and compared with the rising and falling thresholds. When setting this variable, care should be taken in the case of deltaValue sampling - the interval should be set short enough that the sampled variable is very unlikely to increase or decrease by more than 2^63 - 1 during a single sampling interval. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
NUM cHcAlarmVariable	1.3.6.1.4.1.9.10.93.1.1.1.1.3	VariablePointer	read-create	The object identifier of the particular variable to be sampled. Only variables that resolve to an ASN.1 primitive type of INTEGER (INTEGER, Integer32, Counter32, Counter64, Gauge, or TimeTicks) may be sampled. Because SNMP access control is articulated entirely in terms of the contents of MIB views, no access control mechanism exists that can restrict the value of this object to identify only those objects that exist in a particular MIB view. Because there is thus no acceptable means of restricting the read access that could be obtained through the alarm mechanism, the probe must only grant write access to this object in those views that have read access to all objects on the probe. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
INT cHcAlarmSampleType	1.3.6.1.4.1.9.10.93.1.1.1.1.4	INTEGER	read-create	The method of sampling the selected variable and calculating the value to be compared against the thresholds. If the value of this object is absoluteValue(1), the value of the selected variable will be compared directly with the thresholds at the end of the sampling interval. If the value of this object is deltaValue(2), the value of the selected variable at the last sample will be subtracted from the current value, and the difference compared with the thresholds. If the associated cHcAlarmVariable instance could not be obtained at the previous sample interval, then a delta sample is not possible, and the value of the associated cHcAlarmValueStatus object for this interval will be valueNotAvailable(1). This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
NUM cHcAlarmAbsValue	1.3.6.1.4.1.9.10.93.1.1.1.1.5	CounterBasedGauge64	read-only	The absolute value (i.e. unsigned value) of the cHcAlarmVariable statistic during the last sampling period. The value during the current sampling period is not made available until the period is completed. To obtain the true value for this sampling interval, the associated instance of cHcAlarmValueStatus must be checked, and the value of this object adjusted as necessary. If the MIB instance could not be accessed during the sampling interval, then this object will have a value of zero and the associated instance of cHcAlarmValueStatus will be set to 'valueNotAvailable(1)'.
CHC cHcAlarmValueStatus	1.3.6.1.4.1.9.10.93.1.1.1.1.6	CHcValueStatus	read-only	This object indicates the validity and sign of the data for the cHcAlarmAbsValue object, as described in the CHcValueStatus textual convention.
INT cHcAlarmStartupAlarm	1.3.6.1.4.1.9.10.93.1.1.1.1.7	INTEGER	read-create	The alarm that may be sent when this entry is first set to active. If the first sample after this entry becomes active is greater than or equal to the rising threshold and this object is equal to risingAlarm(1) or risingOrFallingAlarm(3), then a single rising alarm will be generated. If the first sample after this entry becomes valid is less than or equal to the falling threshold and this object is equal to fallingAlarm(2) or risingOrFallingAlarm(3), then a single falling alarm will be generated. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
U32 cHcAlarmRisingThreshAbsValueLo	1.3.6.1.4.1.9.10.93.1.1.1.1.8	Unsigned32	read-create	The lower 32 bits of the absolute value for threshold for the sampled statistic. The actual threshold value is determined by the associated instances of the cHcAlarmRisingThreshAbsValueHi and cHcAlarmRisingThresholdValStatus objects, as follows: ABS(threshold) = cHcAlarmRisingThreshAbsValueLo + (cHcAlarmRisingThreshAbsValueHi * 2^^32) The absolute value of the threshold is adjusted as required, as described in the CHcValueStatus textual convention. These three object instances are conceptually combined to represent the rising threshold for this entry. When the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval was less than this threshold, a single event will be generated. A single event will also be generated if the first sample after this entry becomes valid is greater than or equal to this threshold and the associated cHcAlarmStartupAlarm is equal to risingAlarm(1) or risingOrFallingAlarm(3). After a rising event is generated, another such event will not be generated until the sampled value falls below this threshold and reaches the threshold identified by the cHcAlarmFallingThreshAbsValueLo, cHcAlarmFallingThreshAbsValueHi, and cHcAlarmFallingThrsholdValStatus objects. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
U32 cHcAlarmRisingThreshAbsValueHi	1.3.6.1.4.1.9.10.93.1.1.1.1.9	Unsigned32	read-create	The upper 32 bits of the absolute value for threshold for the sampled statistic. The actual threshold value is determined by the associated instances of the cHcAlarmRisingThreshAbsValueLo and cHcAlarmRisingThresholdValStatus objects, as follows: ABS(threshold) = cHcAlarmRisingThreshAbsValueLo + (cHcAlarmRisingThreshAbsValueHi * 2^^32) The absolute value of the threshold is adjusted as required, as described in the CHcValueStatus textual convention. These three object instances are conceptually combined to represent the rising threshold for this entry. When the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval was less than this threshold, a single event will be generated. A single event will also be generated if the first sample after this entry becomes valid is greater than or equal to this threshold and the associated cHcAlarmStartupAlarm is equal to risingAlarm(1) or risingOrFallingAlarm(3). After a rising event is generated, another such event will not be generated until the sampled value falls below this threshold and reaches the threshold identified by the cHcAlarmFallingThreshAbsValueLo, cHcAlarmFallingThreshAbsValueHi, and cHcAlarmFallingThrsholdValStatus objects. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
CHC cHcAlarmRisingThresholdValStatus	1.3.6.1.4.1.9.10.93.1.1.1.1.10	CHcValueStatus	read-create	This object indicates the sign of the data for the rising threshold, as defined by the cHcAlarmRisingThresAbsValueLo and cHcAlarmRisingThresAbsValueHi objects, as described in the CHcValueStatus textual convention. The enumeration 'valueNotAvailable(1)' is not allowed, and the associated cHcAlarmStatus object cannot be equal to 'active(1)' if this object is set to this value. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
U32 cHcAlarmFallingThreshAbsValueLo	1.3.6.1.4.1.9.10.93.1.1.1.1.11	Unsigned32	read-create	The lower 32 bits of the absolute value for threshold for the sampled statistic. The actual threshold value is determined by the associated instances of the cHcAlarmFallingThreshAbsValueHi and cHcAlarmFallingThrsholdValStatus objects, as follows: ABS(threshold) = cHcAlarmFallingThreshAbsValueLo + (cHcAlarmFallingThreshAbsValueHi * 2^^32) The absolute value of the threshold is adjusted as required, as described in the CHcValueStatus textual convention. These three object instances are conceptually combined to represent the falling threshold for this entry. When the current sampled value is less than or equal to this threshold, and the value at the last sampling interval was greater than this threshold, a single event will be generated. A single event will also be generated if the first sample after this entry becomes valid is less than or equal to this threshold and the associated cHcAlarmStartupAlarm is equal to fallingAlarm(2) or risingOrFallingAlarm(3). After a falling event is generated, another such event will not be generated until the sampled value rises above this threshold and reaches the threshold identified by the cHcAlarmRisingThreshAbsValueLo, cHcAlarmRisingThreshAbsValueHi, and cHcAlarmRisingThresholdValStatus objects. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
U32 cHcAlarmFallingThreshAbsValueHi	1.3.6.1.4.1.9.10.93.1.1.1.1.12	Unsigned32	read-create	The upper 32 bits of the absolute value for threshold for the sampled statistic. The actual threshold value is determined by the associated instances of the cHcAlarmFallingThreshAbsValueLo and cHcAlarmFallingThrsholdValStatus objects, as follows: ABS(threshold) = cHcAlarmFallingThreshAbsValueLo + (cHcAlarmFallingThreshAbsValueHi * 2^^32) The absolute value of the threshold is adjusted as required, as described in the CHcValueStatus textual convention. These three object instances are conceptually combined to represent the falling threshold for this entry. When the current sampled value is less than or equal to this threshold, and the value at the last sampling interval was greater than this threshold, a single event will be generated. A single event will also be generated if the first sample after this entry becomes valid is less than or equal to this threshold and the associated cHcAlarmStartupAlarm is equal to fallingAlarm(2) or risingOrFallingAlarm(3). After a falling event is generated, another such event will not be generated until the sampled value rises above this threshold and reaches the threshold identified by the cHcAlarmRisingThreshAbsValueLo, cHcAlarmRisingThreshAbsValueHi, and cHcAlarmRisingThresholdValStatus objects. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
CHC cHcAlarmFallingThrsholdValStatus	1.3.6.1.4.1.9.10.93.1.1.1.1.13	CHcValueStatus	read-create	This object indicates the sign of the data for the falling threshold, as defined by the cHcAlarmFallingThreshAbsValueLo and cHcAlarmFallingThreshAbsValueHi objects, as described in the CHcValueStatus textual convention. The enumeration 'valueNotAvailable(1)' is not allowed, and the associated cHcAlarmStatus object cannot be equal to 'active(1)' if this object is set to this value. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
I32 cHcAlarmRisingEventIndex	1.3.6.1.4.1.9.10.93.1.1.1.1.14	Integer32	read-create	The index of the eventEntry that is used when a rising threshold is crossed. The eventEntry identified by a particular value of this index is the same as identified by the same value of the eventIndex object. If there is no corresponding entry in the eventTable, then no association exists. In particular, if this value is zero, no associated event will be generated, as zero is not a valid event index. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
I32 cHcAlarmFallingEventIndex	1.3.6.1.4.1.9.10.93.1.1.1.1.15	Integer32	read-create	The index of the eventEntry that is used when a falling threshold is crossed. The eventEntry identified by a particular value of this index is the same as identified by the same value of the eventIndex object. If there is no corresponding entry in the eventTable, then no association exists. In particular, if this value is zero, no associated event will be generated, as zero is not a valid event index. This object may not be modified if the associated cHcAlarmStatus object is equal to active(1).
C32 cHcAlarmValueFailedAttemptsEx	1.3.6.1.4.1.9.10.93.1.1.1.1.16	Counter32	read-only	The number of times the associated cHcAlarmVariable instance was polled on behalf of this cHcAlarmEntry, (while in the active state) and the value was not available. This counter may experience a discontinuity if the agent restarts, indicated by the value of sysUpTime.
STR cHcAlarmOwner	1.3.6.1.4.1.9.10.93.1.1.1.1.17	OwnerString	read-create	The entity that configured this entry and is therefore using the resources assigned to it.
STO cHcAlarmStorageType	1.3.6.1.4.1.9.10.93.1.1.1.1.18	StorageType	read-create	The type of non-volatile storage configured for this entry. If this object is equal to 'permanent(4)', then the associated cHcAlarmRisingEventIndex and cHcAlarmFallingEventIndex objects must be writable.
ROW cHcAlarmStatus	1.3.6.1.4.1.9.10.93.1.1.1.1.19	RowStatus	read-create	The status of this row. An entry MUST NOT exist in the active state unless all objects in the entry have an appropriate value, as described in the description clause for each writable object. The cHcAlarmStatus object may be modified if the associated instance of this object is equal to active(1), notInService(2), or notReady(3). All other writable objects may be modified if the associated instance of this object is equal to notInService(2) or notReady(3).
cHcAlarmCapabilitiesObjects	1.3.6.1.4.1.9.10.93.1.2
BIT cHcAlarmCapabilities	1.3.6.1.4.1.9.10.93.1.2.1	Bits	read-only	An indication of the high capacity alarm capabilities supported by this agent. If the 'cHcAlarmCreation' BIT is set, then this agent allows NMS applications to create entries in the cHcAlarmTable. If the 'cHcAlarmNvStorage' BIT is set, then this agent allows entries in the cHcAlarmTable which will be recreated after a system restart, as controlled by the cHcAlarmStorageType object.
cHcAlarmNotifications	1.3.6.1.4.1.9.10.93.2
cHcAlarmNotifPrefix	1.3.6.1.4.1.9.10.93.2.0
NTF cHcRisingAlarm	1.3.6.1.4.1.9.10.93.2.0.1			The SNMP notification that is generated when a high capacity alarm entry crosses its rising threshold and generates an event that is configured for sending SNMP traps. The cHcAlarmEntry object instances identified in the OBJECTS clause are from the entry that causes this notification to be generated.
NTF cHcFallingAlarm	1.3.6.1.4.1.9.10.93.2.0.2			The SNMP notification that is generated when a high capacity alarm entry crosses its falling threshold and generates an event that is configured for sending SNMP traps. The cHcAlarmEntry object instances identified in the OBJECTS clause are from the entry that causes this notification to be generated.
cHcAlarmConformance	1.3.6.1.4.1.9.10.93.3
cHcAlarmCompliances	1.3.6.1.4.1.9.10.93.3.1
cHcAlarmCompliance	1.3.6.1.4.1.9.10.93.3.1.1			Describes the requirements for conformance to the High Capacity Alarm MIB.
cHcAlarmGroups	1.3.6.1.4.1.9.10.93.3.2
cHcAlarmControlGroup	1.3.6.1.4.1.9.10.93.3.2.1			A collection of objects used to configure entries for high capacity alarm threshold monitoring purposes.
cHcAlarmCapabilitiesGroup	1.3.6.1.4.1.9.10.93.3.2.2			A collection of objects used to indicate an agent's high capacity alarm threshold monitoring capabilities.
cHcAlarmNotificationsGroup	1.3.6.1.4.1.9.10.93.3.2.3			A collection of notifications to deliver information related to a high capacity rising or falling threshold event to a management application.

RFC description

Cisco High Capacity (HC) Alarm MIB extension for RMON that provides threshold monitoring and alarm generation for 64-bit MIB objects, overcoming RMON-1 limitations restricted to 32-bit counters.

Start monitoring Cisco platforms supporting High Capacity RMON alarms with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-HC-ALARM-MIB