Hi,
I seem to be having issues getting SNMP inputs to work on a new install of Splunk. I already have this exact setup working in other environments, so this has stumped me.
Error in splunkd.log message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Ciphering services not available snmp_stanza:snmp://cisco:mds9000:test
inputs.conf[snmp://cisco:mds9000:test]
destination = xxx.xxx.xxx.xxx
do_bulk_get = 1
do_get_subtree = 1
index = snmp_test
ipv6 = 0
object_names = 1.3.6.1.4.1.9.9.109.1.1.1.1.7,1.3.6.1.4.1.9.9.109.1.1.1.1.8,1.3.6.1.4.1.9.9.109.1.1.1.1.12,1.3.6.1.4.1.9.9.109.1.1.1.1.13
snmp_mode = attributes
snmp_version = 3
sourcetype = snmp_test1
split_bulk_output = 1
trap_rdns = 0
v3_authKey = ********
v3_authProtocol = usmHMACSHAAuthProtocol
v3_privProtocol = usmAesCfb128Protocol
v3_securityName = ********
v3_privKey = ********
mib_names = CISCO-PROCESS-MIB
disabled = 0
snmpinterval = 300
interval = 300
As the MIBS are already python compiled in the other envs, I've just copied them over. I'm probably missing something blindingly obvious. But if anyone has any ideas, I would be very grateful.
I've also tried an snmpwalk from the collector server and that seems to run ok.
snmpwalk -v3 -l authPriv -u splunk -a SHA -A "********" -x AES -X "********" xxx.xxx.xxx.xxx
SNMPv2-MIB::sysDescr.0 = STRING: Cisco NX-OS(tm) m9100, Software (m9100-s5ek9-mz), Version 6.2(19), RELEASE SOFTWARE >
Copyright (c) 2002-2013 by Cisco Systems, Inc. Compiled 1/30/2017 23:00:00
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.12.3.1.3.1491
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (2288470610) 264 days, 20:51:46.10
SNMPv2-MIB::sysContact.0 = STRING: aname
SNMPv2-MIB::sysName.0 = STRING: aname
OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!
Mind to tell how to install?
i found solution.
You need to pip install pycryptodome package, and copy out the Cipher folder from the package to /opt/splunk/etc/apps/snmp_ta/bin/Cipher. Initially my snmp_ta is using python version 2, after pasting to bin, you need to change to python version 3 to make it work.
Version:
snmp_ta=1.6.5
splunk =9.0.2
Hope it helps someone who having the same issue.
OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!
Hi! so how did you install?
also wanna know how did you install it