All MIBs › EVNTAGENT-MIB › eventVar11
eventVar11
Module: EVNTAGENT-MIB
OID (symbolic): EVNTAGENT-MIB::eventVar11
OID (numeric): 1.3.6.1.4.1.311.1.13.1.9999.16
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: read-only
Description: Event-specific variable data
What is eventVar11?
This OCTET STRING is the eleventh of up to fifteen event-specific variable slots on a Windows event trap, and the MIB notes that Windows XP only populates 11 such variables for a logon-failure event while Windows Server 2003 populates 16. This means eventVar11 is reliably filled on XP-style 11-variable events but is the first of the additional slots that only appear when the richer, platform-specific variable set is used. For a Server 2003 w32LogonFailure trap, this field might carry a sub-status code that XP's shorter event never includes.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.311.1.13.1.9999.16 snmpwalk -v2c -c public <target> EVNTAGENT-MIB::eventVar11
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.311.1.13.1.9999.16.1 snmpget -v2c -c public <target> EVNTAGENT-MIB::eventVar11.1
Start monitoring Microsoft Windows servers with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the EVNTAGENT-MIB::eventVar11 OID value, configure state conditions and alerts, and monitor any Microsoft Windows servers from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.311 | microsoft | EVNTAGENT-MIB |
| 1.3.6.1.4.1.311.1 | software | EVNTAGENT-MIB |
| 1.3.6.1.4.1.311.1.13 | eventlog | EVNTAGENT-MIB |
| 1.3.6.1.4.1.311.1.13.1 | evntagent | EVNTAGENT-MIB |
| 1.3.6.1.4.1.311.1.13.1.9999 | eventData | EVNTAGENT-MIB |
| 1.3.6.1.4.1.311.1.13.1.9999.16 | eventVar11 | EVNTAGENT-MIB |