H3C-SYSLOG-MIB

All MIBs › H3C-SYSLOG-MIB

Organization: Huawei-3com Technologies Co., Ltd.

Last Updated: 2009-05-05

Category: Technology: Logging/Syslog, Vendor: H3C/HH3C

Description: H3C MIB for syslog management configuring remote log hosts, log severity levels, and message format settings.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-SYSLOG-MIB?

H3C-SYSLOG-MIB is an H3C proprietary MIB for configuring the device's syslog subsystem, covering remote log host destinations, message severity-level filtering, and log message format settings. Although no sample objects were supplied, syslog-configuration MIBs of this kind typically expose a table of configured log hosts (IP/port/facility), severity threshold settings per module or globally, and format/timestamp options. Its monitoring relevance is largely indirect: syslog itself is a primary channel through which hardware and software fault events (link flaps, hardware failures, authentication failures, process crashes) are reported off-device, so confirming this MIB's configuration (log hosts reachable, appropriate severity levels enabled) is important groundwork for ensuring fault visibility, even though the MIB's own objects are configuration rather than live fault data. It has no strong dependency on other MIBs beyond general device management conventions. It is deployed across the H3C product line wherever centralized syslog collection is used for operational monitoring, typically after an H3C-SYSLOG-MIB download to load its definitions into a MIB browser or NMS.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-SYSLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C switches and routers with syslog remote logging configured

Monitoring Examples

Without concrete sample objects, exact table/column names cannot be confirmed; conceptually, an administrator would poll a syslog host table to verify the correct remote collector IP addresses are configured and check severity-level settings to ensure critical and warning-level hardware/software events are not being filtered out before reaching the log server. This entry should be revisited once the actual object tree can be inspected for precise names.

What Can Be Monitored

configured remote syslog hosts
log severity filtering
log message format settings

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using h3cLogbufferOverwrittenMessages OID:

Select an H3C switch/router (syslog remote logging config) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cLogbufferOverwrittenMessages into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of log messages overwritten in logbuffer. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cSyslog	1.3.6.1.4.1.2011.10.2.63			All the configuration of the syslog can be managed by syslog Mib.
h3cSyslogObjects	1.3.6.1.4.1.2011.10.2.63.1
h3cSyslogObject	1.3.6.1.4.1.2011.10.2.63.1.1
T/F h3cSyslogState	1.3.6.1.4.1.2011.10.2.63.1.1.1	TruthValue	read-write	The state of syslog: true(1):enable. false(2):disable.
I32 h3cSyslogMaxLoghost	1.3.6.1.4.1.2011.10.2.63.1.1.2	Integer32	read-only	The object shows the maximum number of rows in h3cLoghostTable.
I32 h3cSyslogMaxChannel	1.3.6.1.4.1.2011.10.2.63.1.1.3	Integer32	read-only	The object shows the maximum number of channels in h3cSyslogChannelTable.
I32 h3cSyslogMaxLogbufferSize	1.3.6.1.4.1.2011.10.2.63.1.1.4	Integer32	read-only	The maximum number of messages that can be stored in logbuffer.
I32 h3cSyslogMaxTrapbufferSize	1.3.6.1.4.1.2011.10.2.63.1.1.5	Integer32	read-only	The maximum number of messages that can be stored in trapbuffer.
h3cSyslogConsole	1.3.6.1.4.1.2011.10.2.63.1.2
I32 h3cSyslogConsoleChannel	1.3.6.1.4.1.2011.10.2.63.1.2.1	Integer32	read-write	The channel number of console.
h3cSyslogMonitor	1.3.6.1.4.1.2011.10.2.63.1.3
I32 h3cSyslogMonitorChannel	1.3.6.1.4.1.2011.10.2.63.1.3.1	Integer32	read-write	The channel number of monitor.
h3cSyslogSnmp	1.3.6.1.4.1.2011.10.2.63.1.4
I32 h3cSyslogSnmpChannel	1.3.6.1.4.1.2011.10.2.63.1.4.1	Integer32	read-write	The channel number of snmp.
h3cSyslogLogbuffer	1.3.6.1.4.1.2011.10.2.63.1.5
I32 h3cSyslogLogbufferChannel	1.3.6.1.4.1.2011.10.2.63.1.5.1	Integer32	read-write	The channel number of logbuffer.
I32 h3cSyslogLogbufferSize	1.3.6.1.4.1.2011.10.2.63.1.5.2	Integer32	read-write	The capacity of logbuffer which can be customized by users. The valid range is from 0 to h3cSyslogMaxLogbufferSize.
h3cSyslogLogbufferTable	1.3.6.1.4.1.2011.10.2.63.1.5.3		not-accessible	The table of logbuffer.
h3cSyslogLogbufferEntry	1.3.6.1.4.1.2011.10.2.63.1.5.3.1		not-accessible	The logbuffer entry of syslog.
I32 h3cLogbufferIndex	1.3.6.1.4.1.2011.10.2.63.1.5.3.1.1	Integer32	not-accessible	The index of this table.
U32 h3cLogbufferCurrentMessages	1.3.6.1.4.1.2011.10.2.63.1.5.3.1.2	Unsigned32	read-only	The number of log messages stored in logbuffer.
C32 h3cLogbufferOverwrittenMessagesEx	1.3.6.1.4.1.2011.10.2.63.1.5.3.1.3	Counter32	read-only	The number of log messages overwritten in logbuffer.
C32 h3cLogbufferDroppedMessages	1.3.6.1.4.1.2011.10.2.63.1.5.3.1.4	Counter32	read-only	The number of log messages dropped in logbuffer.
h3cSyslogTrapbuffer	1.3.6.1.4.1.2011.10.2.63.1.6
I32 h3cSyslogTrapbufferChannel	1.3.6.1.4.1.2011.10.2.63.1.6.1	Integer32	read-write	The channel number of trapbuffer.
I32 h3cSyslogTrapbufferSize	1.3.6.1.4.1.2011.10.2.63.1.6.2	Integer32	read-write	The capacity of the trapbuffer which can be customized by users. The valid range is from 0 to h3cSyslogMaxTrapbufferSize.
h3cSyslogTrapbufferTable	1.3.6.1.4.1.2011.10.2.63.1.6.3		not-accessible	The table of trapbuffer.
h3cSyslogTrapbufferEntry	1.3.6.1.4.1.2011.10.2.63.1.6.3.1		not-accessible	The trapbuffer entry of syslog.
I32 h3cTrapbufferIndex	1.3.6.1.4.1.2011.10.2.63.1.6.3.1.1	Integer32	not-accessible	The index of this table.
U32 h3cTrapbufferCurrentMessages	1.3.6.1.4.1.2011.10.2.63.1.6.3.1.2	Unsigned32	read-only	The number of trap messages stored in trapbuffer.
C32 h3cTrapbufferOverwrittenMessages	1.3.6.1.4.1.2011.10.2.63.1.6.3.1.3	Counter32	read-only	The number of trap messages overwritten in trapbuffer.
C32 h3cTrapbufferDroppedMessages	1.3.6.1.4.1.2011.10.2.63.1.6.3.1.4	Counter32	read-only	The number of trap messages dropped in trapbuffer.
h3cSyslogLoghost	1.3.6.1.4.1.2011.10.2.63.1.7
INT h3cSyslogLoghostSourceInterface	1.3.6.1.4.1.2011.10.2.63.1.7.1	INTEGER	read-write	The source interface which sends message to loghost. All loghosts use the same source interface.
TIM h3cSyslogLoghostTimestampType	1.3.6.1.4.1.2011.10.2.63.1.7.2	TimeStampType	read-write	Time stamp type of message sent to loghost.
h3cSyslogLoghostTable	1.3.6.1.4.1.2011.10.2.63.1.7.3		not-accessible	The table of loghost.
h3cSyslogLoghostEntry	1.3.6.1.4.1.2011.10.2.63.1.7.3.1		not-accessible	The loghost entry of syslog.
I32 h3cSyslogLoghostIndex	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.1	Integer32	not-accessible	The index of this table.
I32 h3cSyslogLoghostChannel	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.2	Integer32	read-create	The channel number of loghost.
IPt h3cSyslogLoghostIpaddressType	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.3	InetAddressType	read-create	The ip address type of loghost.
IP h3cSyslogLoghostIpaddress	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.4	InetAddress	read-create	The ip address of loghost.
FAC h3cSyslogLoghostFacility	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.5	FacilityType	read-create	The operations staff can selectively filter the messages with priority which consists of facility that generates the message and severity of the message.
INT h3cSyslogLoghostLanguage	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.6	INTEGER	read-create	The language of the message sent to the loghost.
ROW h3cSyslogLoghostOperateRowStatus	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.7	RowStatus	read-create	The status of this table entry.
I32 h3cSyslogLoghostIpaddressPort	1.3.6.1.4.1.2011.10.2.63.1.7.3.1.8	Integer32	read-create	The loghost server port.
h3cSyslogChannel	1.3.6.1.4.1.2011.10.2.63.1.8
h3cSyslogChannelTable	1.3.6.1.4.1.2011.10.2.63.1.8.1		not-accessible	A table of syslog channel.
h3cSyslogChannelEntry	1.3.6.1.4.1.2011.10.2.63.1.8.1.1		not-accessible	The channel entry of syslog.
I32 h3cSyslogChannelIndex	1.3.6.1.4.1.2011.10.2.63.1.8.1.1.1	Integer32	not-accessible	The index of this table.
STR h3cSyslogChannelName	1.3.6.1.4.1.2011.10.2.63.1.8.1.1.2	DisplayString	read-write	The name of channel. The channel name must be different from each other.
h3cSyslogModule	1.3.6.1.4.1.2011.10.2.63.1.9
h3cSyslogModuleTable	1.3.6.1.4.1.2011.10.2.63.1.9.1		not-accessible	A table of syslog module.
h3cSyslogModuleEntry	1.3.6.1.4.1.2011.10.2.63.1.9.1.1		not-accessible	The module entry of syslog.
I32 h3cSyslogModuleIndex	1.3.6.1.4.1.2011.10.2.63.1.9.1.1.1	Integer32	not-accessible	The index of this table.
STR h3cSyslogModuleName	1.3.6.1.4.1.2011.10.2.63.1.9.1.1.2	DisplayString	read-only	The name of module.
h3cSyslogLog	1.3.6.1.4.1.2011.10.2.63.1.10
TIM h3cSyslogLogTimestampType	1.3.6.1.4.1.2011.10.2.63.1.10.1	TimeStampType	read-write	Time stamp type of log message.
h3cSyslogLogTable	1.3.6.1.4.1.2011.10.2.63.1.10.2		not-accessible	A table of syslog module.
h3cSyslogLogEntry	1.3.6.1.4.1.2011.10.2.63.1.10.2.1		not-accessible	The log entry of syslog.
T/F h3cSyslogLogState	1.3.6.1.4.1.2011.10.2.63.1.10.2.1.1	TruthValue	read-create	The switch state of log.
MES h3cSyslogLogLevel	1.3.6.1.4.1.2011.10.2.63.1.10.2.1.2	MessageLevelType	read-create	The level of log message.
ROW h3cSyslogLogRowStatus	1.3.6.1.4.1.2011.10.2.63.1.10.2.1.3	RowStatus	read-create	The status of this table entry.
h3cSyslogTrap	1.3.6.1.4.1.2011.10.2.63.1.11
TIM h3cSyslogTrapTimestampType	1.3.6.1.4.1.2011.10.2.63.1.11.1	TimeStampType	read-write	Time stamp type of trap message.
h3cSyslogTrapTable	1.3.6.1.4.1.2011.10.2.63.1.11.2		not-accessible	A table of syslog module.
h3cSyslogTrapEntry	1.3.6.1.4.1.2011.10.2.63.1.11.2.1		not-accessible	The trap entry of syslog.
T/F h3cSyslogTrapState	1.3.6.1.4.1.2011.10.2.63.1.11.2.1.1	TruthValue	read-create	The switch state of trap.
MES h3cSyslogTrapLevel	1.3.6.1.4.1.2011.10.2.63.1.11.2.1.2	MessageLevelType	read-create	The level of trap message.
ROW h3cSyslogTrapRowStatus	1.3.6.1.4.1.2011.10.2.63.1.11.2.1.3	RowStatus	read-create	The status of this table entry.
h3cSyslogDebug	1.3.6.1.4.1.2011.10.2.63.1.12
TIM h3cSyslogDebugTimestampType	1.3.6.1.4.1.2011.10.2.63.1.12.1	TimeStampType	read-write	Time stamp type of debug message.
h3cSyslogDebugTable	1.3.6.1.4.1.2011.10.2.63.1.12.2		not-accessible	A table of syslog module.
h3cSyslogDebugEntry	1.3.6.1.4.1.2011.10.2.63.1.12.2.1		not-accessible	The debug entry of syslog.
T/F h3cSyslogDebugState	1.3.6.1.4.1.2011.10.2.63.1.12.2.1.1	TruthValue	read-create	The switch state of debug.
MES h3cSyslogDebugLevel	1.3.6.1.4.1.2011.10.2.63.1.12.2.1.2	MessageLevelType	read-create	The level of debug message.
ROW h3cSyslogDebugRowStatus	1.3.6.1.4.1.2011.10.2.63.1.12.2.1.3	RowStatus	read-create	The status of this table entry.

RFC description

Huawei-3Com syslog configuration MIB (RFC 3164) for managing system logging and log server parameters.

Start monitoring H3C switch/router (syslog remote logging config) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-SYSLOG-MIB