Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section IV. End user
  4. Alert configuration
  5. About using SNMP
  6. SNMP traps
  7. SNMP traps for report-based alerts

SNMP traps for report-based alerts

Each IT Analytics report-based alert trap contains two standard object identifiers and 2N IT Analytics-specific object identifiers where value of N depends on number of columns present in each row in the report. An object identifier (or OID) is a numeric string that is used to uniquely identify an object.

The following table shows the contents of a trap that is sent from IT Analytics for report-based alerts. Four bindings (or 4 name-value pairs) are present in each trap that is sent from IT Analytics and 2N bindings are present for each column present in report. For each column, there are 2 bindings, one for column name and other for its value. Each binding associates a particular Management Information Base (MIB) object instance with its current value.

IT Analytics trap binding shows the name-value pairs that the traps pass to the SNMP manager if SNMP payload format is selected as Enhanced.

Table: IT Analytics report-based alert trap binding

Name

Value

1.3.6.1.2.1.1.3.0

This field is the time (in hundredths of a second) between when IT Analytics server service starts and the IT Analytics trap is sent.

See Request for Comment (RFC) 1905 and 2576 for a detailed definition.

http://www.ietf.org/rfc/rfc1905.txt

http://www.ietf.org/rfc/rfc2576.txt

Example: 1173792454

1.3.6.1.6.3.1.1.4.1.0

This field is the unique identifier for this trap.

See RFC 1905 and RFC 2576 for a detailed definition.

http://www.ietf.org/rfc/rfc1905.txt

http://www.ietf.org/rfc/rfc2576.txt

Example: 1.3.6.1.4.1.15622.3.12.11.2.0.4

1.3.6.1.4.1.15622.3.12.11.1.1

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportName)

It displays the report name

.1.3.6.1.4.1.15622.3.12.11.1.2

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportDataCount)

It displays number of columns present in report. This value can be used to iterate over bindings which contains column name and column value.

For example, if the value is 2 then it means 2 columns are present in the report and there are 4 bindings for column name and value.

1.3.6.1.4.1.15622.3.12.11.1.3.1.1.1

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportData.reportEntry.columnName.1)

It displays name of column 1 of the report.

1.3.6.1.4.1.15622.3.12.11.1.3.1.2.1

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportData.reportEntry.columnValue.1)

It displays value of column 1 of the report.

1.3.6.1.4.1.15622.3.12.11.1.3.1.1.N

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportData.reportEntry.columnName.N)

It displays name of column N of the report.

1.3.6.1.4.1.15622.3.12.11.1.3.1.2.N

(iso.org.dod.internet.private.enterprises.it-analytics.products.itaportal.itaReportAlert.itaReportAlertTrapVarsBranch.reportData.reportEntry.columnName.N)

It displays value of column N of the report.

Note:

The name-value pair in the report-based alert trap binding will be from 1 to N, where N is number of columns present in the report.

Feedback

Was this page helpful?
Previous

SNMP traps for system alerts

Next

Detect alerts in the inventory

Feedback

Was this page helpful?