info regarding two similar generated events 0x10ff0 and 0x11db1

Document ID : KB000095651
Last Modified Date : 14/05/2018
Show Technical Document Details
Question:
Customer is receiving two similar events:
0x10ff0 Device or SNMP agent on Device {m} of type {t} has been rebooted. 
0x11db1 The SNMP engine on device {t}, named {m} has been rebooted 
Reboot time - {D 1} 
SNMP engine boots - {I 2}
and he would like to know which one to modify to generate an alarm.
Answer:
The event 0x00011db1 is generated by interference handler which monitors the snmpEngineBoots attribute(polled) and when its value increments we calculate the reboot time as the difference between current system time and snmpEngineTime and send SNMP_ENGINE_BOOT_EVENT along with the reboot time and snmpEngineBoots value.
The event 0x00010ff0 is triggered when sysUpTime value decreases from the current value. the sysuptime is populated using hrsysuptime which points to "the time ... since the network management portion of the system was re-initialized." None of these generate an alarm. It is up to you to decide which to modify to generate an alarm, maybe the 0x00010ff0 that should be triggered when the device is rebooted.