Hello…it’s me again!
I’m trying to monitor a specific OID (.1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4) and send an alert on a specific value.(3).
When I do a snmpwalk on that OID, I do get the following:
.1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4 = INTEGER: 3
I’ve created an alert with the conditions:
sensors.sensor_current = 3 AND sensors.sensor_oid = ".1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4"
But…I’m not getting an alert and when I do a capture, it’s not matching. What am I doing wrong?
Thanks!!
RR1
29 August 2025 05:50
2
it seems to be sensor_oid value in database table includes sensor index also.
so sensors.sensor_oid = ".1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4" rule is not matching
laf
29 August 2025 22:28
3
The oid in your screenshot is not the same as your rule!
Ummm…are you referring to the screenshot posted by RR1?
laf
30 August 2025 00:27
5
Haha, yes, I thought it was you.
If you are using the custom oids then they don’t go in the sensors table. Look in customoids.
If it’s a sensor then look at the data in mysql as it must not be as you’ve set your rule up.
Searching the codebase for this seems to indicate the asa module graphs this oid already.
Thanks for that info!
So…how would I setup an alert for this? The normal value is 3, so I would like for it to alert when it is not 3.
Is the ASA module a specific module that you enable?
Sorry for the questions, I’m a n00b trying to wrap my head around the finer points of this.
step 1 make sure asa module is enabled for this device.
step 2 set up an alert to state alert sensors with name cfwHardwareStatus where sensor_current != 3. Or just create the state sensor non-normal rule from the alert rule colleciton.
Sorry for the late reply. I’ve been away from work for the past week.
I’m not able to find a specific Cisco ASA module. Can you point me to where I enable it? I’m not able to find anything specifically for the ASA.
Is your device detected as ASA of FTD for OS?
system
Closed
3 February 2026 18:58
11
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.