04-16-2014 04:17 AM
I have SNMP Object ID, for example:.188.8.131.52.4.1.8184.108.40.206.220.127.116.11 And i get trap with Custom Attributes and i want enrichment this incident by used one of custom attributes with oid (.18.104.22.168.4.1.822.214.171.124.126.96.36.199.1.2.X).
But there is one problem oid have the last digit(.X) of the variable, not a constant value.How i can enter variable value?
04-16-2014 10:54 PM
perhaps you'll give the following a try:
as an example, lets say the varbind is:
.188.8.131.52.184.108.40.206.5.7.100 (string) /home
To get "/home" you could create a filter such as:
cia.name like \Q.220.127.116.11.18.104.22.168.5.7\E.*
cia.value like /home
Note the use of \Q and \E to quote the OID, also the use of .* at the end to match the instance which we won't know, and then the use of "like" to match the string.