vmwNsxTDistributedIDSIPSMaxEventsReached
VMWARE-NSX-MIB ·
.1.3.6.1.4.1.6876.120.1.0.33.0.3
Object
notification
The number of intrusion events in the system is vmwNsxTDataCenterIDSEventsCount
which is higher than the maximum allowed value vmwNsxTDataCenterMaxIDSEventsAllowed.
Action required:
There is no manual intervention required. A purge job will kick in automatically
every 3 minutes and delete 10% of the older records to bring the total intrusion events
count in the system to below the threshold value of 1.5 million events.
Context
- MIB
- VMWARE-NSX-MIB
- OID
.1.3.6.1.4.1.6876.120.1.0.33.0.3- Type
- notification
- Status
- current
- Parent
- vmwNsxTDistributedIDSIPSFeature
- Siblings
- 39
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageVeryHighClear NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the very
high threshold value of 95%.
Action required:
None, receipt of this… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.10 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineDown NSX IDPS is enabled via NSX policy and IDPS rules are configured, but
NSX-IDPS engine is down.
Action required:
1. Check /var/log/nsx-syslog.log to see if there are err… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.13 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineDownClear NSX IDPS is in one of the cases below.
1. NSX IDPS is disabled via NSX policy.
2. NSX IDPS engine is enabled, NSX-IDPS engine and vdpi are up, and
NSX IDPS has been enabled and… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.14 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageHigh NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the high
threshold value of 75%.
Action required:
Consider re-balan… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.15 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageHighClear NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the high threshold
value of 75%.
Action required:
None, receipt of this n… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.16 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageMediumHigh NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the medium
high threshold value of 85%.
Action required:
Consider r… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.17 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageMediumHighClear NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the medium
high threshold value of 85%.
Action required:
None, receipt of… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.18 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageVeryHigh NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the
very high threshold value of 95%.
Action required:
Consider re… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.19 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageVeryHighClear NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the very high
threshold value of 95%.
Action required:
None, receipt of … | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.20 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageMediumHigh NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the medium
high threshold value of 85%.
Action required:
Consider re-b… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.21 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageMediumHighClear NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the medium high
threshold value of 85%.
Action required:
None, receipt of th… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.22 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageHighOnDPU NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the high
threshold value of 75% on DPU vmwNsxTDataCenterDPUId.
Acti… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.23 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemoryUsageHighOnDPUClear NSX-IDPS engine memory usage has reached on DPU vmwNsxTDataCenterDPUId,
vmwNsxTDataCenterSystemResourceUsage%, which is below the high threshold
value of 75%.
Action re… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.24 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineDownOnDPU NSX IDPS is enabled via NSX policy and IDPS rules are configured, but
NSX-IDPS engine is down on DPU vmwNsxTDataCenterDPUId.
Action required:
1. Check /var/log/nsx-idps… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.31 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineDownOnDPUClear NSX IDPS is in one of the cases below on DPU vmwNsxTDataCenterDPUId.
1. NSX IDPS is disabled via NSX policy.
2. NSX IDPS engine is enabled, NSX-IDPS engine and vdpi are up, and
… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.32 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemUsageMedHighOnDPU NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the medium
high threshold value of 85% on DPU vmwNsxTDataCenterDPUId.
… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.33 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemUsageMedHighOnDPUClear NSX-IDPS engine memory usage has reached on DPU vmwNsxTDataCenterDPUId,
vmwNsxTDataCenterSystemResourceUsage%, which is below the medium
high threshold value of 85%.
Ac… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.34 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemUsageVeryHighDPU NSX-IDPS engine memory usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the
very high threshold value of 95% on DPU vmwNsxTDataCenterDPUId.
… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.35 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineMemUsageVeryHighDPUClear NSX-IDPS engine memory usage has reached on DPU vmwNsxTDataCenterDPUId,
vmwNsxTDataCenterSystemResourceUsage%, which is below the very high
threshold value of 95%.
Act… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.36 |
| vmwNsxTDistributedIDSIPSMaxEventsReachedClear The number of intrusion events in the system is vmwNsxTDataCenterIDSEventsCount
which is below the maximum allowed value vmwNsxTDataCenterMaxIDSEventsAllowed.
Action re… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.4 |
| vmwNsxTDistributedIDSIPSIDPSBypassedCPUOversubscribed The IDPS engine has insufficient CPU resources and is unable to keep pace
with the incoming traffic resulting in the excess traffic being bypassed.
For more details, login to the … | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.53 |
| vmwNsxTDistributedIDSIPSIDPSBypassedCPUOversubscribedClear The distributed IDPS engine has adequate CPU resources and is not bypassing
any traffic.
Action required:
None, receipt of this notification indicates event cleared. | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.54 |
| vmwNsxTDistributedIDSIPSIDPSBypassedNetworkOversubscribed The IDPS engine is unable to keep pace with the rate of incoming traffic
resulting in the excess traffic being bypassed. For more details, login to
the ESX host and issue the foll… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.55 |
| vmwNsxTDistributedIDSIPSIDPSBypassedNetworkOversubscribedClear The distributed IDPS engine is not bypassing any traffic.
Action required:
None, receipt of this notification indicates event cleared. | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.56 |
| vmwNsxTDistributedIDSIPSIDPSEngineCPUOversubscriptionHigh CPU utilization for the distributed IDPS engine is at or above the high
threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
Review reason for ov… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.57 |
| vmwNsxTDistributedIDSIPSIDPSEngineCPUOversubscriptionHighClear CPU utilization for the distributed IDPS engine is below the high threshold
value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
None, receipt of this noti… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.58 |
| vmwNsxTDistributedIDSIPSIDPSCPUOversubscriptionVeryHigh CPU utilization for the distributed IDPS engine is at or above the very
high threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
Review reason f… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.59 |
| vmwNsxTDistributedIDSIPSIDPSCPUOversubscriptionVeryHighClear CPU utilization for the distributed IDPS engine is below the very high
threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
None, receipt of this… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.60 |
| vmwNsxTDistributedIDSIPSIDPSDroppedCPUOversubscribed The IDPS engine has insufficient CPU resources and is unable to keep pace
with the incoming traffic resulting in the excess traffic being dropped.
For more details, login to the E… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.61 |
| vmwNsxTDistributedIDSIPSIDPSDroppedCPUOversubscribedClear The distributed IDPS engine has adequate CPU resources and is not dropping
any traffic.
Action required:
None, receipt of this notification indicates event cleared. | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.62 |
| vmwNsxTDistributedIDSIPSIDPSDroppedNetworkOversubscribed The IDPS engine is unable to keep pace with the rate of incoming traffic
resulting in the excess traffic being dropped. For more details, login to
the ESX host and issue the follo… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.63 |
| vmwNsxTDistributedIDSIPSIDPSDroppedNetworkOversubscribedClear The distributed IDPS engine is not dropping any traffic.
Action required:
None, receipt of this notification indicates event cleared. | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.64 |
| vmwNsxTDistributedIDSIPSIDPSNetworkOversubscriptionHigh Network utilization for the distributed IDPS engine is at or above the high
threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
Review reason fo… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.65 |
| vmwNsxTDistributedIDSIPSIDPSNetworkOversubscriptionHighClear Network utilization for the distributed IDPS engine is below the high
threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
None, receipt of this … | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.66 |
| vmwNsxTDistributedIDSIPSIDPSNetworkOversubscriptionVeryHigh Network utilization for the distributed IDPS engine is at or above the very
high threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
Review reas… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.67 |
| vmwNsxTDistributedIDSIPSIDPSNetworkOversubscriptionVeryHighClear Network utilization for the distributed IDPS engine is below the very high
threshold value of vmwNsxTDataCenterSystemUsageThreshold%.
Action required:
None, receipt of … | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.68 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageHigh NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the high
threshold value of 75%.
Action required:
Consider re-balancin… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.7 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageHighClear NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is below the high
threshold value of 75%.
Action required:
None, receipt of this noti… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.8 |
| vmwNsxTDistributedIDSIPSNSXIDPSEngineCPUUsageVeryHigh NSX-IDPS engine CPU usage has reached
vmwNsxTDataCenterSystemResourceUsage%, which is at or above the very
high threshold value of 95%.
Action required:
Consider re-bal… | notification | - | .1.3.6.1.4.1.6876.120.1.0.33.0.9 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| vmwNsxTDataCenterTimestamp The timestamp when the NSX Data Center event occurred. | scalar | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.6876.120.1.1.1 |
| vmwNsxTDataCenterFeatureName The NSX Data Center feature ID associated with the event. | scalar | VmwNsxTDataCenterFeatureIdType | .1.3.6.1.4.1.6876.120.1.1.2 |
| vmwNsxTDataCenterEventType The name of the NSX Data Center event. | scalar | VmwNsxTDataCenterEventTypeType | .1.3.6.1.4.1.6876.120.1.1.3 |
| vmwNsxTDataCenterEventSeverity The severity of the NSX Data Center event. | scalar | VmwNsxTDataCenterSeverityType | .1.3.6.1.4.1.6876.120.1.1.4 |
| vmwNsxTDataCenterNodeId The node ID from where a NSX Data Center event was emitted. | scalar | VmwNsxTDataCenterNodeIdType | .1.3.6.1.4.1.6876.120.1.1.5 |
| vmwNsxTDataCenterNodeType The type of node from where a NSX Data Center event was emitted. | scalar | VmwNsxTDataCenterNodeTypeType | .1.3.6.1.4.1.6876.120.1.1.6 |
| vmwNsxTDataCenterEntityId The ID of a NSX Data Center entity an event pertains to. The event
description field provides additional details of the entity. For
example the ID can be for a specific Load Balan… | scalar | VmwNsxTDataCenterEntityIdType | .1.3.6.1.4.1.6876.120.1.1.21 |
| vmwNsxTDataCenterIDSEventsCount This value is not expected to be empty. | scalar | VmwNsxTDataCenterIDSEventsCountType | .1.3.6.1.4.1.6876.120.1.1.64 |
| vmwNsxTDataCenterMaxIDSEventsAllowed This value is not expected to be empty. | scalar | VmwNsxTDataCenterMaxIDSEventsAllowedType | .1.3.6.1.4.1.6876.120.1.1.55 |