The Cisco coldStart trap contains 2 varbinds.
By default only 1 varbind is mapped to an index.
If the second varbind is needed, these steps should be taken.
1. Create directory structure:
$SPECROOT/custom/Events/Cisco_Router/Rtr_Cisco/
2. Place your AlertMap file in this directory.
3. Make your AlertMap look like this:
0.0 0x00010013 1.3.6.1.2.1.1.3(1,0)\
1.3.6.1.4.1.9.2.1.2(2,0)
4. Save and update Events off VNM model (VNM -> SpectroSERVER Control -> Update Event Configuration)
5. Send a trap to test.
The code is looking in that exact directory structure. If custom work is done outside of this structure, it will not work.