04-16-2014 04:17 AM
I have SNMP Object ID, for example:.220.127.116.11.4.1.818.104.22.168.22.214.171.124 And i get trap with Custom Attributes and i want enrichment this incident by used one of custom attributes with oid (.126.96.36.199.4.1.8188.8.131.52.184.108.40.206.1.2.X).
But there is one problem oid have the last digit(.X) of the variable, not a constant value.How i can enter variable value?
04-16-2014 10:54 PM
perhaps you'll give the following a try:
as an example, lets say the varbind is:
.220.127.116.11.18.104.22.168.5.7.100 (string) /home
To get "/home" you could create a filter such as:
cia.name like \Q.22.214.171.124.126.96.36.199.5.7\E.*
cia.value like /home
Note the use of \Q and \E to quote the OID, also the use of .* at the end to match the instance which we won't know, and then the use of "like" to match the string.