# Logstash - Translate Use custom MIBS (OEM - Oracle Enterprise Manager)
**URL:** https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915
**Category:** Logstash
**Created:** [October 23, 2025, 11:47am UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915 "2025-10-23T11:47:34Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Tal1](https://discuss.elastic.co/u/Tal1)
#### Post date: [October 23, 2025, 11:47am UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/1 "2025-10-23T11:47:34Z")
Greetings Experts,
I hope someone will be able to help me with that issue.
I’ve installed Logstash version 9.1.4 on linux redhat machine (version 9.5).
logstash is up and running on port 162 receiving snmp trap v3 - everything working perfectly!
my conf file looks like this:
```auto
input {
snmptrap {
port => 162
supported_versions => ['3']
security_name => ""
auth_protocol => "md5"
auth_pass => ''
priv_protocol => "aes"
priv_pass => ''
security_level => "authPriv"
codec => plain
use_provided_mibs => true
mib_paths => "/usr/share/snmp/mibs"
oid_mapping_format => "ruby_snmp"
}
}
filter {
mutate {
add_field => { "raw_event" => "%{message}" }
}
}
output {
file {
path => "/tmp/snmptrap.txt"
codec => line { format => "%{message}"}
}
}
```
I’ve also installed libsmi, however I cannot make the trap to be translated according to the mib.
Does anyone know how make logstash use the custom mib?
Thanks in Advance!
---
### Author:  [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [October 23, 2025, 1:17pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/2 "2025-10-23T13:17:29Z")
Does
logstash user has access to mib\_paths =\> "_/usr/share/snmp/mibs_"?
---
### Author:  [@Tal1](https://discuss.elastic.co/u/Tal1)
#### Post date: [October 23, 2025, 1:40pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/3 "2025-10-23T13:40:11Z")
yes it has. the thing is, under the logs i dont see it mention this path.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [October 23, 2025, 1:53pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/4 "2025-10-23T13:53:42Z")
> [@Tal1](#):
>
> the thing is, under the logs i dont see it mention this path
The input will [log an info message](https://github.com/logstash-plugins/logstash-integration-snmp/blob/8011e85aeab3b70b974e92d6ec10526aec99f485/lib/logstash/plugin_mixins/snmp/common.rb#L101) if it tries to load the MIB. If it is not logging that then it is not loading the MIB.
---
### Author:  [@Tal1](https://discuss.elastic.co/u/Tal1)
#### Post date: [October 23, 2025, 2:15pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/5 "2025-10-23T14:15:26Z")
Ive just managed to load it, however it’s not reading it and nothing mention in the log file, do i need to use: smidump -k -f python /path/to/omstrap.v1 \> /usr/share/logstash/vendor/bundle/.../mibs/custom/ORACLE-ENTERPRISE-MANAGER-4-MIB.dic
or just use it as .txt file?
---
### Author:  [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [October 23, 2025, 2:45pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/6 "2025-10-23T14:45:15Z")
[Here](https://discuss.elastic.co/t/snmptrap-not-reading-snmp-traffic-through-logstash/56199/5) is a sample, for input&output. Also you can rename the original field based on MIBs in meaningful name for instance: ""SNMPv2-SMI::enterprises.6027.3.1.1.4.1.2" -\> [chAlarmVarString](https://mibs.observium.org/mib/F10-CHASSIS-MIB/#chAlarmVarString). You can get MIB database from [online](https://mibbrowser.online/mibdb_search.php?mib=ORACLE-ENTERPRISE-MANAGER-4-MIB).
Also use debug in the output, provide us with more details.
`stdout { codec => rubydebug{}}`
---
### Author:  [@Tal1](https://discuss.elastic.co/u/Tal1)
#### Post date: [October 23, 2025, 4:03pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/7 "2025-10-23T16:03:57Z")
hello Rios
thanks for the reply, i have no problem with making the Traps to work, just like i said traps arriving and being written into the logfile, however when you need to translate the OIDs into names it just doesnt load it from the mib i provided.
btw the ORA mib link you provided contains 400 lines mine is offical from ORACLE and it contains 1400 lines.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [October 23, 2025, 4:15pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/8 "2025-10-23T16:15:18Z")
I expect it needs to be in the same format as the [bundled MIBs](https://github.com/logstash-plugins/logstash-integration-snmp/tree/main/lib/mibs/ietf).
---
### Author:  [@Tal1](https://discuss.elastic.co/u/Tal1)
#### Post date: [October 23, 2025, 4:18pm UTC](https://discuss.elastic.co/t/logstash-translate-use-custom-mibs-oem-oracle-enterprise-manager/382915/9 "2025-10-23T16:18:41Z")
correct thats why i’ve installed libsmi and ran smidump --level=1 -k -f python /tmp/omstrap.v1 \> /usr/share/logstash/vendor/bundle/jruby/3.1.0/gems/logstash-integration-snmp-4.0.7-java/lib/mibs/custom/ORACLE-ENTERPRISE-MANAGER-4-MIB.dic
why ORACLE-ENTERPRISE-MANAGER-4-MIB?
because inside the mib i received there was this line: ORACLE-ENTERPRISE-MANAGER-4-MIB DEFINITIONS ::= BEGIN