https://community.splunk.com/t5/Getting-Data-In/SNMP-metrics-with-collectd/m-p/440252#M76769 <P>Following the documentation here <A href="https://docs.splunk.com/Documentation/Splunk/7.2.0/Metrics/GetMetricsInCollectd">https://docs.splunk.com/Documentation/Splunk/7.2.0/Metrics/GetMetricsInCollectd</A> we're trying to get SNMP data with collectd into a metrics index. </P> <P>The current format we're receiving is as follows (about 50% of the entire event using sourcetype snmp_ta):</P> <PRE><CODE>["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"2","type":"cpu","type_instance":"softirq"},{"values":[0],"dstypes":["derive"],"dsnames":["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"2","type":"cpu","type_instance":"idle"},{"values":[98.1006747093728],"dstypes":["derive"],"dsnames":["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"3","type":"cpu","type_instance":"idle"},{"values":[16.1998630209115,3.59996956020255],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_packets","type_instance":""},{"values":[2098.28607958568,6531.45666911971],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_octets","type_instance":""},{"values":[0,0],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_errors","type_instance":""},{"values":[0,0],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_dropped","type_instance":""},{"values":[16.0999211648893,16.0999211648893],"dstypes":["derive","derive"],"dsnames": </CODE></PRE> <P>How do you get the right format for metrics?<BR /> The events don't show up in the metrics index but no error shows up either in the _internal log.</P> Mon, 22 Oct 2018 13:59:01 GMT mmoermans 2018-10-22T13:59:01Z https://community.splunk.com/t5/Getting-Data-In/SNMP-metrics-with-collectd/m-p/440252#M76769 <P>Following the documentation here <A href="https://docs.splunk.com/Documentation/Splunk/7.2.0/Metrics/GetMetricsInCollectd">https://docs.splunk.com/Documentation/Splunk/7.2.0/Metrics/GetMetricsInCollectd</A> we're trying to get SNMP data with collectd into a metrics index. </P> <P>The current format we're receiving is as follows (about 50% of the entire event using sourcetype snmp_ta):</P> <PRE><CODE>["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"2","type":"cpu","type_instance":"softirq"},{"values":[0],"dstypes":["derive"],"dsnames":["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"2","type":"cpu","type_instance":"idle"},{"values":[98.1006747093728],"dstypes":["derive"],"dsnames":["value"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"cpu","plugin_instance":"3","type":"cpu","type_instance":"idle"},{"values":[16.1998630209115,3.59996956020255],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_packets","type_instance":""},{"values":[2098.28607958568,6531.45666911971],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_octets","type_instance":""},{"values":[0,0],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_errors","type_instance":""},{"values":[0,0],"dstypes":["derive","derive"],"dsnames":["rx","tx"],"time":1540210462.641,"interval":10.000,"host":"localhost","plugin":"interface","plugin_instance":"ens192","type":"if_dropped","type_instance":""},{"values":[16.0999211648893,16.0999211648893],"dstypes":["derive","derive"],"dsnames": </CODE></PRE> <P>How do you get the right format for metrics?<BR /> The events don't show up in the metrics index but no error shows up either in the _internal log.</P> Mon, 22 Oct 2018 13:59:01 GMT https://community.splunk.com/t5/Getting-Data-In/SNMP-metrics-with-collectd/m-p/440252#M76769 mmoermans 2018-10-22T13:59:01Z https://community.splunk.com/t5/Getting-Data-In/SNMP-metrics-with-collectd/m-p/440253#M76770 <P>Got it working by using a different collection URL and changing the sourcetype to collectd_http.</P> Mon, 29 Oct 2018 12:18:09 GMT https://community.splunk.com/t5/Getting-Data-In/SNMP-metrics-with-collectd/m-p/440253#M76770 mmoermans 2018-10-29T12:18:09Z