Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section IV. End user
  4. Alert configuration
  5. About using SNMP
  6. SNMP traps
  7. SNMP traps for system alerts

SNMP traps for system alerts

Each IT Analytics trap contains 2 standard object identifiers and 13 IT Analytics-specific object identifiers. An object identifier (or OID) is a numeric string that is used to uniquely identify an object.

The following table shows the contents of a trap that is sent from IT Analytics. A total of 15 bindings (or 15 name-value pairs) are present in each trap that is sent from IT Analytics. Each binding associates a particular Management Information Base (MIB) object instance with its current value.

IT Analytics trap binding shows the name-value pairs that the traps pass to the SNMP manager if SNMP payload format is selected as Enhanced.

Table: IT Analytics system alerts trap binding

Name

Value

1.3.6.1.2.1.1.3.0

This field is the time (in hundredths of a second) between when IT Analytics server service starts and the IT Analytics trap is sent.

See Request for Comment (RFC) 1905 and 2576 for a detailed definition.

http://www.ietf.org/rfc/rfc1905.txt

http://www.ietf.org/rfc/rfc2576.txt

Example: 1173792454

1.3.6.1.6.3.1.1.4.1.0

This field is the unique identifier for this trap.

See RFC 1905 and RFC 2576 for a detailed definition.

http://www.ietf.org/rfc/rfc1905.txt

http://www.ietf.org/rfc/rfc2576.txt

Example: 1.3.6.1.4.1.15622.3.12.10.2.0.4

1.3.6.1.4.1.15622.3.12.10.1.1

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal. itaSystemAlert.itaSystemAlertTrapVarsBranch. alertApplicationName)

This field is the Application Name.

Example: IT Analytics

1.3.6.1.4.1.15622.3.12.10.1.2

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch. alertDomainId)

This value specifies the Domain Id of the alert.

Example: 100000

1.3.6.1.4.1.15622.3.12.10.1.3

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertDescription)

This field is the alert description.

1.3.6.1.4.1.15622.3.12.10.1.4

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertPolicyName)

This field is the alert policy name.

1.3.6.1.4.1.15622.3.12.10.1.5

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertIdTypeName)

Defines the object type for which the alert was set. Object type dictates which drill down report is displayed.

1.3.6.1.4.1.15622.3.12.10.1.6

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertRootObjectName)

Displays the object on which the alert was issued.

1.3.6.1.4.1.15622.3.12.10.1.7

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertParentIdTypeName)

If a hierarchy structure exists, displays the object type of the parent for the alert object.

1.3.6.1.4.1.15622.3.12.10.1.8

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertParentObjectName)

If a hierarchy structure exists, displays the name of parent of the alert object.

1.3.6.1.4.1.15622.3.12.10.1.9

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertLastUpdated)

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertLastUpdated) 

Displays the date the alert condition occurred.

1.3.6.1.4.1.15622.3.12.10.1.10

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertCount)

The number of occurrences of alert.

1.3.6.1.4.1.15622.3.12.10.1.11

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertSeverity)

Indicates the severity of the alert.

1.3.6.1.4.1.15622.3.12.10.1.12

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.alertLastAlertDate)

Displays the latest date the alert condition occurred.

1.3.6.1.4.1.15622.3.12.10.1.13

(iso.org.dod.internet.private.enterprises.it-analytics.products.Itaportal.itaSystemAlert.itaSystemAlertTrapVarsBranch.ticketNumber)

ServiceNow ticket number.

The first two OIDs listed in the table are standard SNMP OIDs. The other OIDs starting from 1.3.6.1.4.1.15622.3.12.10.1.1 to 1.3.6.1.4.1.15622.3.12.10.1.12 are IT Analytics OIDs. As per SNMPv2c trap definition, the two standard SNMP OIDs must be present as part of every trap.

All the 12 IT Analytics OIDs are defined in the IT Analytics MIB files. However, the two standard OIDs are not defined in the IT Analytics MIB files.

Feedback

Was this page helpful?
Previous

SNMP traps

Next

SNMP traps for report-based alerts

Feedback

Was this page helpful?