HH3C-SYSLOG-MIB

All MIBs › HH3C-SYSLOG-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2010-06-09

Category: Technology: Logging/Syslog, Vendor: H3C/HH3C

Description: HH3C MIB for system log (syslog) configuration managing log levels, targets, and notification rules on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-SYSLOG-MIB?

HH3C-SYSLOG-MIB is an H3C enterprise MIB for managing the device's syslog subsystem, covering configuration of log channels (console, monitor, SNMP, log buffer), maximum log-host and channel counts, and buffer sizing for both the log buffer and trap buffer. It exposes both configuration objects (channel assignments, buffer size limits) and operational data via the log buffer table, which stores recent log entries for retrieval. This MIB is directly useful for monitoring a device's software/event-status by letting an operator poll the in-memory log buffer (hh3cSyslogLogbufferTable) for recent system events, and confirm the syslog service itself is enabled (hh3cSyslogState) and not silently dropping messages due to an undersized buffer. It complements the standard SNMPv2 notification/trap mechanism, since the SNMP channel (hh3cSyslogSnmpChannel) determines which log severities get forwarded as SNMP notifications. Typical deployment is across the full range of H3C routers and switches for centralized event logging and alerting. Engineers can download the HH3C-SYSLOG-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-SYSLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C router
H3C switch

Monitoring Examples

An operator can poll hh3cSyslogLogbufferTable/hh3cSyslogLogbufferEntry to retrieve recent buffered log messages directly via SNMP, useful when syslog server connectivity is down. hh3cSyslogLogbufferSize versus hh3cSyslogMaxLogbufferSize reveals whether the buffer is near capacity and old messages are being overwritten before collection. hh3cSyslogSnmpChannel and hh3cSyslogMaxTrapbufferSize configuration confirm which severities are eligible to generate SNMP traps, so a gap here would explain why expected alerts aren't firing.

What Can Be Monitored

syslog service enable state
log buffer contents/size
trap buffer size
max log-host/channel counts
SNMP notification channel config
console/monitor channel settings

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TAddress
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hh3cLogbufferOverwrittenMessages OID:

Select an H3C router or switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cLogbufferOverwrittenMessages into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of log messages overwritten in logbuffer. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cSyslog	1.3.6.1.4.1.25506.2.63			All the configuration of the syslog can be managed by syslog Mib.
hh3cSyslogObjects	1.3.6.1.4.1.25506.2.63.1
hh3cSyslogObject	1.3.6.1.4.1.25506.2.63.1.1
T/F hh3cSyslogState	1.3.6.1.4.1.25506.2.63.1.1.1	TruthValue	read-write	The state of syslog: true(1):enable. false(2):disable.
I32 hh3cSyslogMaxLoghost	1.3.6.1.4.1.25506.2.63.1.1.2	Integer32	read-only	The object shows the maximum number of rows in hh3cLoghostTable.
I32 hh3cSyslogMaxChannel	1.3.6.1.4.1.25506.2.63.1.1.3	Integer32	read-only	The object shows the maximum number of channels in hh3cSyslogChannelTable.
I32 hh3cSyslogMaxLogbufferSize	1.3.6.1.4.1.25506.2.63.1.1.4	Integer32	read-only	The maximum number of messages that can be stored in logbuffer.
I32 hh3cSyslogMaxTrapbufferSize	1.3.6.1.4.1.25506.2.63.1.1.5	Integer32	read-only	The maximum number of messages that can be stored in trapbuffer.
hh3cSyslogConsole	1.3.6.1.4.1.25506.2.63.1.2
I32 hh3cSyslogConsoleChannel	1.3.6.1.4.1.25506.2.63.1.2.1	Integer32	read-write	The channel number of console.
hh3cSyslogMonitor	1.3.6.1.4.1.25506.2.63.1.3
I32 hh3cSyslogMonitorChannel	1.3.6.1.4.1.25506.2.63.1.3.1	Integer32	read-write	The channel number of monitor.
hh3cSyslogSnmp	1.3.6.1.4.1.25506.2.63.1.4
I32 hh3cSyslogSnmpChannel	1.3.6.1.4.1.25506.2.63.1.4.1	Integer32	read-write	The channel number of snmp.
hh3cSyslogLogbuffer	1.3.6.1.4.1.25506.2.63.1.5
I32 hh3cSyslogLogbufferChannel	1.3.6.1.4.1.25506.2.63.1.5.1	Integer32	read-write	The channel number of logbuffer.
I32 hh3cSyslogLogbufferSize	1.3.6.1.4.1.25506.2.63.1.5.2	Integer32	read-write	The capacity of logbuffer which can be customized by users. The valid range is from 0 to hh3cSyslogMaxLogbufferSize.
hh3cSyslogLogbufferTable	1.3.6.1.4.1.25506.2.63.1.5.3		not-accessible	The table of logbuffer.
hh3cSyslogLogbufferEntry	1.3.6.1.4.1.25506.2.63.1.5.3.1		not-accessible	The logbuffer entry of syslog.
I32 hh3cLogbufferIndex	1.3.6.1.4.1.25506.2.63.1.5.3.1.1	Integer32	not-accessible	The index of this table.
U32 hh3cLogbufferCurrentMessages	1.3.6.1.4.1.25506.2.63.1.5.3.1.2	Unsigned32	read-only	The number of log messages stored in logbuffer.
C32 hh3cLogbufferOverwrittenMessagesEx	1.3.6.1.4.1.25506.2.63.1.5.3.1.3	Counter32	read-only	The number of log messages overwritten in logbuffer.
C32 hh3cLogbufferDroppedMessages	1.3.6.1.4.1.25506.2.63.1.5.3.1.4	Counter32	read-only	The number of log messages dropped in logbuffer.
hh3cSyslogTrapbuffer	1.3.6.1.4.1.25506.2.63.1.6
I32 hh3cSyslogTrapbufferChannel	1.3.6.1.4.1.25506.2.63.1.6.1	Integer32	read-write	The channel number of trapbuffer.
I32 hh3cSyslogTrapbufferSize	1.3.6.1.4.1.25506.2.63.1.6.2	Integer32	read-write	The capacity of the trapbuffer which can be customized by users. The valid range is from 0 to hh3cSyslogMaxTrapbufferSize.
hh3cSyslogTrapbufferTable	1.3.6.1.4.1.25506.2.63.1.6.3		not-accessible	The table of trapbuffer.
hh3cSyslogTrapbufferEntry	1.3.6.1.4.1.25506.2.63.1.6.3.1		not-accessible	The trapbuffer entry of syslog.
I32 hh3cTrapbufferIndex	1.3.6.1.4.1.25506.2.63.1.6.3.1.1	Integer32	not-accessible	The index of this table.
U32 hh3cTrapbufferCurrentMessages	1.3.6.1.4.1.25506.2.63.1.6.3.1.2	Unsigned32	read-only	The number of trap messages stored in trapbuffer.
C32 hh3cTrapbufferOverwrittenMessages	1.3.6.1.4.1.25506.2.63.1.6.3.1.3	Counter32	read-only	The number of trap messages overwritten in trapbuffer.
C32 hh3cTrapbufferDroppedMessages	1.3.6.1.4.1.25506.2.63.1.6.3.1.4	Counter32	read-only	The number of trap messages dropped in trapbuffer.
hh3cSyslogLoghost	1.3.6.1.4.1.25506.2.63.1.7
INT hh3cSyslogLoghostSourceInterface	1.3.6.1.4.1.25506.2.63.1.7.1	INTEGER	read-write	The source interface which sends message to loghost. All loghosts use the same source interface.
TIM hh3cSyslogLoghostTimestampType	1.3.6.1.4.1.25506.2.63.1.7.2	TimeStampType	read-write	Time stamp type of message sent to loghost.
hh3cSyslogLoghostTable	1.3.6.1.4.1.25506.2.63.1.7.3		not-accessible	The table of loghost.
hh3cSyslogLoghostEntry	1.3.6.1.4.1.25506.2.63.1.7.3.1		not-accessible	The loghost entry of syslog.
I32 hh3cSyslogLoghostIndex	1.3.6.1.4.1.25506.2.63.1.7.3.1.1	Integer32	not-accessible	The index of this table.
I32 hh3cSyslogLoghostChannel	1.3.6.1.4.1.25506.2.63.1.7.3.1.2	Integer32	read-create	The channel number of loghost.
IPt hh3cSyslogLoghostIpaddressType	1.3.6.1.4.1.25506.2.63.1.7.3.1.3	InetAddressType	read-create	The ip address type of loghost.
IP hh3cSyslogLoghostIpaddress	1.3.6.1.4.1.25506.2.63.1.7.3.1.4	InetAddress	read-create	The ip address of loghost.
FAC hh3cSyslogLoghostFacility	1.3.6.1.4.1.25506.2.63.1.7.3.1.5	FacilityType	read-create	The operations staff can selectively filter the messages with priority which consists of facility that generates the message and severity of the message.
INT hh3cSyslogLoghostLanguage	1.3.6.1.4.1.25506.2.63.1.7.3.1.6	INTEGER	read-create	The language of the message sent to the loghost.
ROW hh3cSyslogLoghostOperateRowStatus	1.3.6.1.4.1.25506.2.63.1.7.3.1.7	RowStatus	read-create	The status of this table entry.
I32 hh3cSyslogLoghostIpaddressPort	1.3.6.1.4.1.25506.2.63.1.7.3.1.8	Integer32	read-create	The loghost server port.
ADR hh3cSyslogLoghostTAddress	1.3.6.1.4.1.25506.2.63.1.7.3.1.9	TAddress	read-create	The loghost server transport address.
hh3cSyslogChannel	1.3.6.1.4.1.25506.2.63.1.8
hh3cSyslogChannelTable	1.3.6.1.4.1.25506.2.63.1.8.1		not-accessible	A table of syslog channel.
hh3cSyslogChannelEntry	1.3.6.1.4.1.25506.2.63.1.8.1.1		not-accessible	The channel entry of syslog.
I32 hh3cSyslogChannelIndex	1.3.6.1.4.1.25506.2.63.1.8.1.1.1	Integer32	not-accessible	The index of this table.
STR hh3cSyslogChannelName	1.3.6.1.4.1.25506.2.63.1.8.1.1.2	DisplayString	read-write	The name of channel. The channel name must be different from each other.
hh3cSyslogModule	1.3.6.1.4.1.25506.2.63.1.9
hh3cSyslogModuleTable	1.3.6.1.4.1.25506.2.63.1.9.1		not-accessible	A table of syslog module.
hh3cSyslogModuleEntry	1.3.6.1.4.1.25506.2.63.1.9.1.1		not-accessible	The module entry of syslog.
I32 hh3cSyslogModuleIndex	1.3.6.1.4.1.25506.2.63.1.9.1.1.1	Integer32	not-accessible	The index of this table.
STR hh3cSyslogModuleName	1.3.6.1.4.1.25506.2.63.1.9.1.1.2	DisplayString	read-only	The name of module.
hh3cSyslogLog	1.3.6.1.4.1.25506.2.63.1.10
TIM hh3cSyslogLogTimestampType	1.3.6.1.4.1.25506.2.63.1.10.1	TimeStampType	read-write	Time stamp type of log message.
hh3cSyslogLogTable	1.3.6.1.4.1.25506.2.63.1.10.2		not-accessible	A table of syslog module.
hh3cSyslogLogEntry	1.3.6.1.4.1.25506.2.63.1.10.2.1		not-accessible	The log entry of syslog.
T/F hh3cSyslogLogState	1.3.6.1.4.1.25506.2.63.1.10.2.1.1	TruthValue	read-create	The switch state of log.
MES hh3cSyslogLogLevel	1.3.6.1.4.1.25506.2.63.1.10.2.1.2	MessageLevelType	read-create	The level of log message.
ROW hh3cSyslogLogRowStatus	1.3.6.1.4.1.25506.2.63.1.10.2.1.3	RowStatus	read-create	The status of this table entry.
MES hh3cSyslogLogGlobalLevel	1.3.6.1.4.1.25506.2.63.1.10.3	MessageLevelType	read-write	The global level of log message.
hh3cSyslogTrap	1.3.6.1.4.1.25506.2.63.1.11
TIM hh3cSyslogTrapTimestampType	1.3.6.1.4.1.25506.2.63.1.11.1	TimeStampType	read-write	Time stamp type of trap message.
hh3cSyslogTrapTable	1.3.6.1.4.1.25506.2.63.1.11.2		not-accessible	A table of syslog module.
hh3cSyslogTrapEntry	1.3.6.1.4.1.25506.2.63.1.11.2.1		not-accessible	The trap entry of syslog.
T/F hh3cSyslogTrapState	1.3.6.1.4.1.25506.2.63.1.11.2.1.1	TruthValue	read-create	The switch state of trap.
MES hh3cSyslogTrapLevel	1.3.6.1.4.1.25506.2.63.1.11.2.1.2	MessageLevelType	read-create	The level of trap message.
ROW hh3cSyslogTrapRowStatus	1.3.6.1.4.1.25506.2.63.1.11.2.1.3	RowStatus	read-create	The status of this table entry.
hh3cSyslogDebug	1.3.6.1.4.1.25506.2.63.1.12
TIM hh3cSyslogDebugTimestampType	1.3.6.1.4.1.25506.2.63.1.12.1	TimeStampType	read-write	Time stamp type of debug message.
hh3cSyslogDebugTable	1.3.6.1.4.1.25506.2.63.1.12.2		not-accessible	A table of syslog module.
hh3cSyslogDebugEntry	1.3.6.1.4.1.25506.2.63.1.12.2.1		not-accessible	The debug entry of syslog.
T/F hh3cSyslogDebugState	1.3.6.1.4.1.25506.2.63.1.12.2.1.1	TruthValue	read-create	The switch state of debug.
MES hh3cSyslogDebugLevel	1.3.6.1.4.1.25506.2.63.1.12.2.1.2	MessageLevelType	read-create	The level of debug message.
ROW hh3cSyslogDebugRowStatus	1.3.6.1.4.1.25506.2.63.1.12.2.1.3	RowStatus	read-create	The status of this table entry.

RFC description

Manages syslog configuration including logging levels, hosts, and timestamps.

Start monitoring H3C routers and switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-SYSLOG-MIB