topic Re: Can SNMP Modular Input be installed in the Universal Forwarder? in All Apps and Add-ons

Can SNMP Modular Input be installed in the Universal Forwarder?

teddyidc1101 — Mon, 26 Mar 2018 23:21:19 GMT

Hi, our requirement is to install SNMP Modular Input but we are not sure yet how and where are we required to configure it in Splunk deployment? Please help.

Thanks!

Re: Can SNMP Modular Input be installed in the Universal Forwarder?

Damien_Dallimor — Tue, 27 Mar 2018 03:14:58 GMT

Yes it can , this is a common deployment architecture, particularly for high volume OID polling.
When deploying to a UF , there is no confgi UI , so you edit the SNMP stanza in an inputs.conf file manually.
All files live on the UF , just untar or push out the SNMP app to etc/apps.

Re: Can SNMP Modular Input be installed in the Universal Forwarder?

teddyidc1101 — Mon, 16 Apr 2018 07:14:23 GMT

thanks @Damien...sorry for the late response as we focused on different feed lately. We'll get into this again once we are back on the requirement 🙂

Re: Can SNMP Modular Input be installed in the Universal Forwarder?

teddyidc1101 — Thu, 26 Apr 2018 01:44:27 GMT

for a deployment that have several servers with UF on them, is it advisable to have the smnp_ta installed via DS and push them to forwarder together with the inputs.conf changes? or manually doing it? do you have any documentation specific on the TA implementation on distributed deployment?