HH3C-USERLOG-MIB

All MIBs › HH3C-USERLOG-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2003-04-10

Category: Technology: Logging/Syslog, Vendor: H3C/HH3C

Description: HH3C MIB for user log management recording user authentication and access events on H3C devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-USERLOG-MIB?

HH3C-USERLOG-MIB is a private H3C enterprise MIB dedicated to the device's userlog feature, providing objects to configure and monitor the running state of user-activity logging. Per its module description it covers both configuration of the userlog feature and monitoring of its operational state, implying objects for enabling/disabling logging and observing whether the logging subsystem is active. Its monitoring focus is software-oriented — verifying that user authentication and access logging is functioning — which supports security auditing and compliance rather than hardware status. It likely depends on or complements HH3C-USER-MIB and AAA-related MIBs, since the events it logs originate from user authentication and access activity. It is deployed on H3C routers and switches where audit logging of user logins/actions is required. Engineers can download the HH3C-USERLOG-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-USERLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C routers
H3C switches

Monitoring Examples

The provided source excerpt for this MIB does not list specific object or table names, so a concrete polling scenario using real object identifiers cannot be given; based on the module description, a monitoring station would be expected to check the userlog feature's administrative/operational status objects to confirm user login and access events are actively being logged, rather than reading numeric performance counters.

Imported Objects

From HH3C-OID-MIB

hh3cRhw

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using hh3cUserlogNatTotalEntries OID:

Select an H3C router/switch (user activity audit logging) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cUserlogNatTotalEntries into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of NAT flow entries which are logged. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cUserLogMIB	1.3.6.1.4.1.25506.8.18			The HH3C-USERLOG-MIB contains objects to Manage configuration and Monitor running state for userlog feature.
hh3cUserlogObjects	1.3.6.1.4.1.25506.8.18.1
hh3cUserlogNatObjects	1.3.6.1.4.1.25506.8.18.1.1
I32 hh3cUserlogNatVersion	1.3.6.1.4.1.25506.8.18.1.1.1	Integer32	read-only	NAT LOG version. Currently only version 1 is developed.
I32 hh3cUserlogNatSyslog	1.3.6.1.4.1.25506.8.18.1.1.2	Integer32	read-write	NAT LOG format. If 1, LOG format is sysLog. If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
IP hh3cUserlogNatSourceIP	1.3.6.1.4.1.25506.8.18.1.1.3	IpAddress	read-write	The Source IP address of NAT LOG UDP packet.
I32 hh3cUserlogNatFlowBegin	1.3.6.1.4.1.25506.8.18.1.1.4	Integer32	read-write	Log the NAT flow when it is created. If 1, this function is enabled. If 0, this function is disabled. This function will be used when real-time monitor required.
I32 hh3cUserlogNatActiveTime	1.3.6.1.4.1.25506.8.18.1.1.5	Integer32	read-write	The active time for long-time existed NAT flow. Unit: minute. Range: 10 minutes ~ 120 minutes. When setting it, NAT flow can be logged after an interval of active time. This function will be used when real-time monitor required. The default value 0 means real-time monitor function is disabled.
hh3cUserlogNatSlotCfgInfoTable	1.3.6.1.4.1.25506.8.18.1.1.6		not-accessible	A table of NAT LOG configuration information for the specified slot.
hh3cUserlogNatSlotCfgInfoEntry	1.3.6.1.4.1.25506.8.18.1.1.6.1		not-accessible	NAT LOG Configuration Information Entry for a slot.
I32 hh3cUserlogNatCfgSlotNumber	1.3.6.1.4.1.25506.8.18.1.1.6.1.1	Integer32	read-only	Slot number. Specify which slot is configured with NAT LOG.
I32 hh3cUserlogNatEnable	1.3.6.1.4.1.25506.8.18.1.1.6.1.2	Integer32	read-write	The NAT LOG feature Enable status. If 1, NAT LOG is enbled. If 0, NAT LOG is disabled.
I32 hh3cUserlogNatAclNumber	1.3.6.1.4.1.25506.8.18.1.1.6.1.3	Integer32	read-write	Access-list number. The value 0 means no ACL is specified. Only when NAT LOG is enabled, can ACL be configured. Only NAT flow which match the ACL will be logged.
IP hh3cUserlogNatHostAddress	1.3.6.1.4.1.25506.8.18.1.1.6.1.4	IpAddress	read-write	The IP address of NAT LOG server.
I32 hh3cUserlogNatUdpPort	1.3.6.1.4.1.25506.8.18.1.1.6.1.5	Integer32	read-write	The UDP Port Number of NAT LOG UDP packet.
hh3cUserlogNatSlotRunInfoTable	1.3.6.1.4.1.25506.8.18.1.1.7		not-accessible	A table of NAT LOG running information for the specified slot.
hh3cUserlogNatSlotRunInfoEntry	1.3.6.1.4.1.25506.8.18.1.1.7.1		not-accessible	NAT LOG Running Information Entry for a slot.
I32 hh3cUserlogNatRunSlotNumber	1.3.6.1.4.1.25506.8.18.1.1.7.1.1	Integer32	read-only	Slot number. Specify on which slot the NAT LOG statistics displayed.
C32 hh3cUserlogNatTotalEntriesEx	1.3.6.1.4.1.25506.8.18.1.1.7.1.2	Counter32	read-only	The total number of NAT flow entries which are logged.
C32 hh3cUserlogNatTotalPackets	1.3.6.1.4.1.25506.8.18.1.1.7.1.3	Counter32	read-only	The total number of NAT LOG UDP packets generated by the router.
C32 hh3cUserlogNatFailedEntries	1.3.6.1.4.1.25506.8.18.1.1.7.1.4	Counter32	read-only	The total number of NAT flow entries failed in outputting.
C32 hh3cUserlogNatFailedPackets	1.3.6.1.4.1.25506.8.18.1.1.7.1.5	Counter32	read-only	The total number of NAT LOG UDP packets failed in outputting.
I32 hh3cUserlogNatClearRunStat	1.3.6.1.4.1.25506.8.18.1.1.7.1.6	Integer32	read-write	Clear the running statistics for NAT LOG. Write-only. If 1, the running statistics for NAT LOG is resetted. Other value is invalid.
hh3cUserlogFlowObjects	1.3.6.1.4.1.25506.8.18.1.2
I32 hh3cUserlogFlowVersion	1.3.6.1.4.1.25506.8.18.1.2.1	Integer32	read-only	BAS FLOW LOG version. Currently only version 1 is developed.
I32 hh3cUserlogFlowSyslog	1.3.6.1.4.1.25506.8.18.1.2.2	Integer32	read-write	BAS FLOW LOG format. If 1, LOG format is sysLog. If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
IP hh3cUserlogFlowSourceIP	1.3.6.1.4.1.25506.8.18.1.2.3	IpAddress	read-write	The Source IP address of BAS FLOW LOG UDP packet.
I32 hh3cUserlogFlowFlowBegin	1.3.6.1.4.1.25506.8.18.1.2.4	Integer32	read-write	Log the BAS flow when it is created. If 1, this function is enabled. If 0, this function is disabled. This function will be used when real-time monitor required.
I32 hh3cUserlogFlowActiveTime	1.3.6.1.4.1.25506.8.18.1.2.5	Integer32	read-write	The active time for long-time existed BAS flow. Unit: minute. Range: 10 minutes ~ 120 minutes. When setting it, BAS flow can be logged after an internal of active time. This function will be used when real-time monitor required. The default value 0 means real-time monitor function is disabled.
hh3cUserlogFlowSlotCfgInfoTable	1.3.6.1.4.1.25506.8.18.1.2.6		not-accessible	A table of BAS FLOW LOG configuration information for the specified slot.
hh3cUserlogFlowSlotCfgInfoEntry	1.3.6.1.4.1.25506.8.18.1.2.6.1		not-accessible	BAS FLOW LOG Configuration Information Entry for a slot.
I32 hh3cUserlogFlowCfgSlotNumber	1.3.6.1.4.1.25506.8.18.1.2.6.1.1	Integer32	read-only	Slot number. Specify which slot is configured with BAS FLOW LOG.
I32 hh3cUserlogFlowEnable	1.3.6.1.4.1.25506.8.18.1.2.6.1.2	Integer32	read-write	The BAS FLOW LOG feature Enable status. If 1, BAS FLOW LOG is enbled. If 0, BAS FLOW LOG is disabled.
I32 hh3cUserlogFlowAclNumber	1.3.6.1.4.1.25506.8.18.1.2.6.1.3	Integer32	read-write	Access-list number. The value 0 means no ACL is specified. Only when BAS FLOW LOG is enabled, can ACL be configured. Only BAS flow which match the ACL will be logged.
IP hh3cUserlogFlowHostAddress	1.3.6.1.4.1.25506.8.18.1.2.6.1.4	IpAddress	read-write	The IP address of BAS FLOW LOG server.
I32 hh3cUserlogFlowUdpPort	1.3.6.1.4.1.25506.8.18.1.2.6.1.5	Integer32	read-write	The UDP Port Number of BAS FLOW LOG UDP packet.
hh3cUserlogFlowSlotRunInfoTable	1.3.6.1.4.1.25506.8.18.1.2.7		not-accessible	A table of BAS FLOW LOG running information for the specified slot.
hh3cUserlogFlowSlotRunInfoEntry	1.3.6.1.4.1.25506.8.18.1.2.7.1		not-accessible	Running Information Entry for a slot.
I32 hh3cUserlogFlowRunSlotNumber	1.3.6.1.4.1.25506.8.18.1.2.7.1.1	Integer32	read-only	Slot number. Specify on which slot the BAS FLOW LOG statistics displayed.
C32 hh3cUserlogFlowTotalEntries	1.3.6.1.4.1.25506.8.18.1.2.7.1.2	Counter32	read-only	The total number of BAS FLOW Entries which are logged.
C32 hh3cUserlogFlowTotalPackets	1.3.6.1.4.1.25506.8.18.1.2.7.1.3	Counter32	read-only	The total number of FLOW LOG UDP packet generated by the router.
C32 hh3cUserlogFlowFailedEntries	1.3.6.1.4.1.25506.8.18.1.2.7.1.4	Counter32	read-only	The total number of BAS FLOW entries failed in outputting.
C32 hh3cUserlogFlowFailedPackets	1.3.6.1.4.1.25506.8.18.1.2.7.1.5	Counter32	read-only	The total number of BAS FLOW LOG UDP packet failed in outputting.
I32 hh3cUserlogFlowClearRunStat	1.3.6.1.4.1.25506.8.18.1.2.7.1.6	Integer32	read-write	Clear the running statistics for FLOW LOG. Write-only. If 1, the running statistics for FLOW LOG is resetted. Other value is invalid.
hh3cUserlogAccessObjects	1.3.6.1.4.1.25506.8.18.1.3
I32 hh3cUserlogAccessVersion	1.3.6.1.4.1.25506.8.18.1.3.1	Integer32	read-only	BAS ACCESS LOG version. Currently only version 1 is developed.
I32 hh3cUserlogAccessSyslog	1.3.6.1.4.1.25506.8.18.1.3.2	Integer32	read-write	BAS ACCESS LOG format. If 1, LOG format is sysLog; If 0, LOG format is UDP packet. UDP packet is the default format, and is recommended.
IP hh3cUserlogAccessSourceIP	1.3.6.1.4.1.25506.8.18.1.3.3	IpAddress	read-write	The Source IP address of BAS ACCESS LOG UDP packet.
hh3cUserlogAccessSlotCfgInfoTable	1.3.6.1.4.1.25506.8.18.1.3.4		not-accessible	A table of BAS ACCESS LOG configuration information for the specified slot.
hh3cUserlogAccessSlotCfgInfoEntry	1.3.6.1.4.1.25506.8.18.1.3.4.1		not-accessible	BAS ACCESS LOG Configuration Information Entry for a slot.
I32 hh3cUserlogAccessCfgSlotNumber	1.3.6.1.4.1.25506.8.18.1.3.4.1.1	Integer32	read-only	Slot number. Specify which slot is configured with BAS ACCESS LOG.
I32 hh3cUserlogAccessEnable	1.3.6.1.4.1.25506.8.18.1.3.4.1.2	Integer32	read-write	The BAS ACCESS LOG feature Enable status. If 1, BAS ACCESS LOG is enbled. If 0, BAS ACCESS LOG is disabled.
IP hh3cUserlogAccessHostAddress	1.3.6.1.4.1.25506.8.18.1.3.4.1.3	IpAddress	read-write	The IP address of BAS ACCESS LOG server.
I32 hh3cUserlogAccessUdpPort	1.3.6.1.4.1.25506.8.18.1.3.4.1.4	Integer32	read-write	The UDP Port Number of BAS ACCESS LOG UDP packet.
hh3cUserlogAccessSlotRunInfoTable	1.3.6.1.4.1.25506.8.18.1.3.5		not-accessible	A table of BAS ACCESS LOG running information for the specified slot.
hh3cUserlogAccessSlotRunInfoEntry	1.3.6.1.4.1.25506.8.18.1.3.5.1		not-accessible	Running Information Entry for a slot.
I32 hh3cUserlogAccessRunSlotNumber	1.3.6.1.4.1.25506.8.18.1.3.5.1.1	Integer32	read-only	Slot number. Specify on which slot the BAS ACCESS LOG statistics displayed.
C32 hh3cUserlogAccessTotalEntries	1.3.6.1.4.1.25506.8.18.1.3.5.1.2	Counter32	read-only	The total number of BAS ACCESS Records which are logged.
C32 hh3cUserlogAccessTotalPackets	1.3.6.1.4.1.25506.8.18.1.3.5.1.3	Counter32	read-only	The total number of ACCESS LOG UDP packet generated by the router.
C32 hh3cUserlogAccessFailedEntries	1.3.6.1.4.1.25506.8.18.1.3.5.1.4	Counter32	read-only	The total number of BAS ACCESS entries failed in outputting.
C32 hh3cUserlogAccessFailedPackets	1.3.6.1.4.1.25506.8.18.1.3.5.1.5	Counter32	read-only	The total number of BAS ACCESS LOG UDP packet failed in outputting.
I32 hh3cUserlogAccessClearRunStat	1.3.6.1.4.1.25506.8.18.1.3.5.1.6	Integer32	read-write	Clear the running statistics for ACCESS LOG. Write-only. If 1, the running statistics for ACCESS LOG is resetted. Other value is invalid.
hh3cUserlogNotifications	1.3.6.1.4.1.25506.8.18.2
hh3cUserlogConformance	1.3.6.1.4.1.25506.8.18.3
hh3cUserlogCompliances	1.3.6.1.4.1.25506.8.18.3.1
hh3cUserlogCompliance	1.3.6.1.4.1.25506.8.18.3.1.1			The compliance statement for entities which implement the H3C Userlog mib.
hh3cUserlogGroups	1.3.6.1.4.1.25506.8.18.3.2
hh3cUserlogMandatoryGroup	1.3.6.1.4.1.25506.8.18.3.2.1			A collection of objects providing mandatory Userlog information.
hh3cUserlogConfigGroup	1.3.6.1.4.1.25506.8.18.3.2.2			All configurable parameters of Userlog feature.
hh3cUserlogInfoGroup	1.3.6.1.4.1.25506.8.18.3.2.3			All running information of Userlog feature.

RFC description

Vendor-private MIB for H3C/Huawei product user logging and audit trail management; defines objects for capturing user activities and system events on H3C network devices.

Start monitoring H3C router/switch (user activity audit logging) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-USERLOG-MIB

What Is HH3C-USERLOG-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description