HPN-ICF-SYSLOG-MIB

All MIBs › HPN-ICF-SYSLOG-MIB

Last Updated: 2010-06-09

Category: Alarm and Event Management, Technology: Logging/Syslog, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Manages syslog message format, severity filtering, and remote logging server configuration on HP/Comware devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-SYSLOG-MIB?

HPN-ICF-SYSLOG-MIB is an HP/H3C Comware proprietary MIB for configuring and monitoring the device's syslog subsystem. It exposes objects controlling whether logging is enabled, the maximum number of log hosts and output channels, and the sizing of the internal log buffer and trap buffer, plus per-channel routing to console, terminal/monitor, SNMP, and buffer destinations. Because syslog is a device's primary fault- and event-reporting mechanism, this MIB is central to monitoring software status: it lets an NMS confirm logging is active, check buffer utilization/size to avoid message loss, and audit which severities are routed to which destinations after a configuration change. It complements standard fault MIBs by giving visibility into the local event pipeline itself rather than a specific hardware subsystem. It is typically deployed alongside centralized log-collection tools in networks built on HP A-Series/H3C Comware equipment to ensure critical alerts reach the NOC, and this HPN-ICF-SYSLOG-MIB guide details the relevant syslog configuration objects.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-SYSLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP/H3C Comware switches and routers

Monitoring Examples

An operator checks hpnicfSyslogState to confirm logging is globally enabled and compares hpnicfSyslogLogbufferSize against hpnicfSyslogMaxLogbufferSize to see if the local buffer is near capacity and at risk of dropping older messages. Polling hpnicfSyslogLogbufferTable retrieves the buffered log entries themselves for correlation with a fault. hpnicfSyslogConsoleChannel, hpnicfSyslogMonitorChannel, and hpnicfSyslogSnmpChannel are compared to verify severity filtering is consistent across console, terminal, and SNMP-trap output channels after a config change.

What Can Be Monitored

syslog enable/disable state
log buffer size and utilization
trap buffer size
number of configured log hosts/channels
per-channel severity filtering (console/monitor/SNMP)

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TAddress
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hpnicfLogbufferOverwrittenMessages OID:

Select an HP/H3C Comware switch or router (syslog subsystem config) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfLogbufferOverwrittenMessages into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of log messages overwritten in logbuffer. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfSyslog	1.3.6.1.4.1.11.2.14.11.15.2.63			All the configuration of the syslog can be managed by syslog Mib.
hpnicfSyslogObjects	1.3.6.1.4.1.11.2.14.11.15.2.63.1
hpnicfSyslogObject	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1
T/F hpnicfSyslogState	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.1	TruthValue	read-write	The state of syslog: true(1):enable. false(2):disable.
I32 hpnicfSyslogMaxLoghost	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.2	Integer32	read-only	The object shows the maximum number of rows in hpnicfLoghostTable.
I32 hpnicfSyslogMaxChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.3	Integer32	read-only	The object shows the maximum number of channels in hpnicfSyslogChannelTable.
I32 hpnicfSyslogMaxLogbufferSize	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.4	Integer32	read-only	The maximum number of messages that can be stored in logbuffer.
I32 hpnicfSyslogMaxTrapbufferSize	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.5	Integer32	read-only	The maximum number of messages that can be stored in trapbuffer.
INT hpnicfSyslogState2	1.3.6.1.4.1.11.2.14.11.15.2.63.1.1.6	INTEGER	read-write	Status of syslog, on for enabled or off for disabled. This node differs from hpnicfSyslogState in value.
hpnicfSyslogConsole	1.3.6.1.4.1.11.2.14.11.15.2.63.1.2
I32 hpnicfSyslogConsoleChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.2.1	Integer32	read-write	The channel number of console.
hpnicfSyslogMonitor	1.3.6.1.4.1.11.2.14.11.15.2.63.1.3
I32 hpnicfSyslogMonitorChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.3.1	Integer32	read-write	The channel number of monitor.
hpnicfSyslogSnmp	1.3.6.1.4.1.11.2.14.11.15.2.63.1.4
I32 hpnicfSyslogSnmpChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.4.1	Integer32	read-write	The channel number of snmp.
hpnicfSyslogLogbuffer	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5
I32 hpnicfSyslogLogbufferChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.1	Integer32	read-write	The channel number of logbuffer.
I32 hpnicfSyslogLogbufferSize	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.2	Integer32	read-write	The capacity of logbuffer which can be customized by users. The valid range is from 0 to hpnicfSyslogMaxLogbufferSize.
hpnicfSyslogLogbufferTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3		not-accessible	The table of logbuffer.
hpnicfSyslogLogbufferEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3.1		not-accessible	The logbuffer entry of syslog.
I32 hpnicfLogbufferIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3.1.1	Integer32	not-accessible	The index of this table.
U32 hpnicfLogbufferCurrentMessages	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3.1.2	Unsigned32	read-only	The number of log messages stored in logbuffer.
C32 hpnicfLogbufferOverwrittenMessagesEx	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3.1.3	Counter32	read-only	The number of log messages overwritten in logbuffer.
C32 hpnicfLogbufferDroppedMessages	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.3.1.4	Counter32	read-only	The number of log messages dropped in logbuffer.
hpnicfSyslogLogbufContTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.4		not-accessible	The table of logbuffer contents.
hpnicfSyslogLogbufContEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.4.1		not-accessible	The contens entry of logbuffer.
I32 hpnicfLogbufContIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.4.1.1	Integer32	not-accessible	The index of this table.
STR hpnicfLogbufContDescription	1.3.6.1.4.1.11.2.14.11.15.2.63.1.5.4.1.2	DisplayString	read-only	The contents of logbuffer.
hpnicfSyslogTrapbuffer	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6
I32 hpnicfSyslogTrapbufferChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.1	Integer32	read-write	The channel number of trapbuffer.
I32 hpnicfSyslogTrapbufferSize	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.2	Integer32	read-write	The capacity of the trapbuffer which can be customized by users. The valid range is from 0 to hpnicfSyslogMaxTrapbufferSize.
hpnicfSyslogTrapbufferTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3		not-accessible	The table of trapbuffer.
hpnicfSyslogTrapbufferEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3.1		not-accessible	The trapbuffer entry of syslog.
I32 hpnicfTrapbufferIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3.1.1	Integer32	not-accessible	The index of this table.
U32 hpnicfTrapbufferCurrentMessages	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3.1.2	Unsigned32	read-only	The number of trap messages stored in trapbuffer.
C32 hpnicfTrapbufferOverwrittenMessages	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3.1.3	Counter32	read-only	The number of trap messages overwritten in trapbuffer.
C32 hpnicfTrapbufferDroppedMessages	1.3.6.1.4.1.11.2.14.11.15.2.63.1.6.3.1.4	Counter32	read-only	The number of trap messages dropped in trapbuffer.
hpnicfSyslogLoghost	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7
I32 hpnicfSyslogLoghostSourceInterface	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.1	Integer32	read-write	The source interface which sends message to loghost. All loghosts use the same source interface.
TIM hpnicfSyslogLoghostTimestampType	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.2	TimeStampType	read-write	Time stamp type of message sent to loghost.
hpnicfSyslogLoghostTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3		not-accessible	The table of loghost.
hpnicfSyslogLoghostEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1		not-accessible	The loghost entry of syslog.
I32 hpnicfSyslogLoghostIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.1	Integer32	not-accessible	The index of this table.
I32 hpnicfSyslogLoghostChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.2	Integer32	read-create	The channel number of loghost.
IPt hpnicfSyslogLoghostIpaddressType	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.3	InetAddressType	read-create	The ip address type of loghost.
IP hpnicfSyslogLoghostIpaddress	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.4	InetAddress	read-create	The ip address of loghost.
FAC hpnicfSyslogLoghostFacility	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.5	FacilityType	read-create	The operations staff can selectively filter the messages with priority which consists of facility that generates the message and severity of the message.
INT hpnicfSyslogLoghostLanguage	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.6	INTEGER	read-create	The language of the message sent to the loghost.
ROW hpnicfSyslogLoghostOperateRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.7	RowStatus	read-create	The status of this table entry.
I32 hpnicfSyslogLoghostIpaddressPort	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.8	Integer32	read-create	The loghost server port.
ADR hpnicfSyslogLoghostTAddress	1.3.6.1.4.1.11.2.14.11.15.2.63.1.7.3.1.9	TAddress	read-create	The loghost server transport address.
hpnicfSyslogChannel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.8
hpnicfSyslogChannelTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.8.1		not-accessible	A table of syslog channel.
hpnicfSyslogChannelEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.8.1.1		not-accessible	The channel entry of syslog.
I32 hpnicfSyslogChannelIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.8.1.1.1	Integer32	not-accessible	The index of this table.
STR hpnicfSyslogChannelName	1.3.6.1.4.1.11.2.14.11.15.2.63.1.8.1.1.2	DisplayString	read-write	The name of channel. The channel name must be different from each other.
hpnicfSyslogModule	1.3.6.1.4.1.11.2.14.11.15.2.63.1.9
hpnicfSyslogModuleTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.9.1		not-accessible	A table of syslog module.
hpnicfSyslogModuleEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.9.1.1		not-accessible	The module entry of syslog.
I32 hpnicfSyslogModuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.63.1.9.1.1.1	Integer32	not-accessible	The index of this table.
STR hpnicfSyslogModuleName	1.3.6.1.4.1.11.2.14.11.15.2.63.1.9.1.1.2	DisplayString	read-only	The name of module.
hpnicfSyslogLog	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10
TIM hpnicfSyslogLogTimestampType	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.1	TimeStampType	read-write	Time stamp type of log message.
hpnicfSyslogLogTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.2		not-accessible	A table of syslog module.
hpnicfSyslogLogEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.2.1		not-accessible	The log entry of syslog.
T/F hpnicfSyslogLogState	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.2.1.1	TruthValue	read-create	The switch state of log.
MES hpnicfSyslogLogLevel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.2.1.2	MessageLevelType	read-create	The level of log message.
ROW hpnicfSyslogLogRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.2.1.3	RowStatus	read-create	The status of this table entry.
MES hpnicfSyslogLogGlobalLevel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.3	MessageLevelType	read-write	The global level of log message. This object is replaced by hpnicfSyslogLogGlobalLevelRfc because its value does not accord with RFC5424.
INT hpnicfSyslogLogGlobalLevelRfc	1.3.6.1.4.1.11.2.14.11.15.2.63.1.10.4	INTEGER	read-write	The global level of log message. This object replaces hpnicfSyslogLogGlobalLevel because it observes the terms of RFC5424.
hpnicfSyslogTrap	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11
TIM hpnicfSyslogTrapTimestampType	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.1	TimeStampType	read-write	Time stamp type of trap message.
hpnicfSyslogTrapTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.2		not-accessible	A table of syslog module.
hpnicfSyslogTrapEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.2.1		not-accessible	The trap entry of syslog.
T/F hpnicfSyslogTrapState	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.2.1.1	TruthValue	read-create	The switch state of trap.
MES hpnicfSyslogTrapLevel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.2.1.2	MessageLevelType	read-create	The level of trap message.
ROW hpnicfSyslogTrapRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.63.1.11.2.1.3	RowStatus	read-create	The status of this table entry.
hpnicfSyslogDebug	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12
TIM hpnicfSyslogDebugTimestampType	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.1	TimeStampType	read-write	Time stamp type of debug message.
hpnicfSyslogDebugTable	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.2		not-accessible	A table of syslog module.
hpnicfSyslogDebugEntry	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.2.1		not-accessible	The debug entry of syslog.
T/F hpnicfSyslogDebugState	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.2.1.1	TruthValue	read-create	The switch state of debug.
MES hpnicfSyslogDebugLevel	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.2.1.2	MessageLevelType	read-create	The level of debug message.
ROW hpnicfSyslogDebugRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.63.1.12.2.1.3	RowStatus	read-create	The status of this table entry.

RFC description

Manages syslog configuration and logging operations on HP switches including message severity levels and log destinations.

Start monitoring HP/H3C Comware switch or router (syslog subsystem config) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-SYSLOG-MIB