MIB OID Translation for the same oid?

Elastic Stack Logstash
1

hi all,

i have two MIB file : TCP-MIB.yaml and RFC1213-MIB.yam all have defined the oid as follows,

tcpConnState: 1.3.6.1.2.1.6.13.1.1

from kibana ,

RFC1213-MIB::tcpConnState.14.32.100.75.2065.172.18.86.111.23092 	  	  4

As you can see part of the OID is translated. Namely 1.3.6.1.2.1.6.13.1.1 into RFC1213-MIB::tcpConnState.
i am confused about it why the oid defined in two MIB file, but why the logstash translate from RFC1213-MIB file ?
how to work for the translation ?

3

Hello,

How do you used the "yamlmibdir" option ?

4

yamlmibdir => "/opt/logstash/vendor/bundle/jruby/1.9/gems/snmp-1.2.0/data/ruby/snmp/mibs"

5

I don't know if you want to have the RFC1213 yaml file but I think that Logstash find in these file and the first file with a result is RFC1213 (and not TCP-MIB).

If you want to have TCP-MIB only, I suggest you to have your own folder with yaml files describing oids. (juste place the TCP-MIB.yaml into this new file and specify the new path to "yamlmibdir")