How can you use Splunk to monitor an HP LaserJet P3015 printer?

[bogdan_nicolesc]

Hi all,

I need a solution to monitor a printer with Splunk.

How can I hook up a printer to Splunk?

I have found this: https://www.splunk.com/blog/2014/04/21/windows-print-monitoring-in-splunk-6.html

But I need to get errors and all i can get from that printer, not just "inventory type information such as the printers, the ports they are attached to (on Windows, servers always connect to printers via ports – even on the network) and the drivers running them are the first."

What would help me a lot, would be something to continuously monitor that printer and to send me some alerts.

Thank you,

Bogdan.

[bogdan_nicolesc]

Hi all,

Thank you for the answers, but i need something like this HP Printer Security, to monitor that printer activity.

Thank you,
Bogdan

[DMohn]

This software leverages the same methods we recommended (SNMP, Web Admin Frontend).

You will not find a pre-made solution for this in Splunk.

[nickhills]

The best approach (assuming the printer supports SNMP) is to install/configure an SNMP target server, and then configure the printer to send traps to your SNMP server.

You might be able to do this with the SNMP add in, however, from experience you may be better installing snmpd and ingesting the logs from that service.

Once you have an SNMP server, you will find yourself adding traps from all sorts of other devices like switches, cameras etc.

Although this article is ITSI focused, there is some good background info here:
https://www.splunk.com/blog/2018/08/30/managing-snmp-traps-with-itsi-event-analytics.html

[DMohn]

Unfortunately, there is no straight-forward method to do this. If the monitoring via a connected Windows system is not sufficient for you, you may relay to one of the other options:

• Collecting data from the printer via SNMP (if capable)
• Collecting data from the printer's HTTP interface

None of these methods will be a "plug-and-play" style solution, but it might be something to start from.

Regarding SNMP - there is at least a HP-LASERJET-COMMON-MIB at http://www.oidview.com/mibs/11/HP-LASERJET-COMMON-MIB.html - which gives a slight hope, that this might be a feasible solution.
For general information on how to get SNMP data to Splunk, please refer to
- https://answers.splunk.com/answers/38219/snmpget-with-splunk.html
- https://splunkbase.splunk.com/app/1537/