04-16-2014 04:17 AM
I have SNMP Object ID, for example:.184.108.40.206.4.1.8220.127.116.11.18.104.22.168 And i get trap with Custom Attributes and i want enrichment this incident by used one of custom attributes with oid (.22.214.171.124.4.1.8126.96.36.199.188.8.131.52.1.2.X).
But there is one problem oid have the last digit(.X) of the variable, not a constant value.How i can enter variable value?
04-16-2014 10:54 PM
perhaps you'll give the following a try:
as an example, lets say the varbind is:
.184.108.40.206.220.127.116.11.5.7.100 (string) /home
To get "/home" you could create a filter such as:
cia.name like \Q.18.104.22.168.22.214.171.124.5.7\E.*
cia.value like /home
Note the use of \Q and \E to quote the OID, also the use of .* at the end to match the instance which we won't know, and then the use of "like" to match the string.