I have a need to map traps from people that are using the Microsoft Event to SNMP trap tool. This tool makes the trap enterprise OID variable for different systems. So for us that may be 300 different enterprise OIDs that mean the same thing. Is there a way to map a trap and ignore some parts of the enterprise OID?
example:
1.3.6.1.4.1.311.1.13.1.4.84.67.54.54.6.2147747842
The 1.3.6.1.4.1.311.1.13.1.4 will always be the same. But after that it gets strange.
The 84.67.54.54 will be different from different sources.
So how can I take:
1.3.6.1.4.1.311.1.13.1.4.84.67.54.54
1.3.6.1.4.1.311.1.13.1.4.85.32.27.32
1.3.6.1.4.1.311.1.13.1.4.96.16.38.55
and make them all represent the same thing? I know if I only had a few, I could repeat those in the alert map, but since I'm going to have hundreds of them, and I don't have any idea what they will look like, it could be a maintenance nightmare.