All Apps and Add-ons

Ciphering services not available with snmp_ta?

cdstealer
Contributor

Hi,
I seem to be having issues getting SNMP inputs to work on a new install of Splunk. I already have this exact setup working in other environments, so this has stumped me.

Error in splunkd.log
message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Ciphering services not available snmp_stanza:snmp://cisco:mds9000:test

inputs.conf
[snmp://cisco:mds9000:test]
destination = xxx.xxx.xxx.xxx
do_bulk_get = 1
do_get_subtree = 1
index = snmp_test
ipv6 = 0
object_names = 1.3.6.1.4.1.9.9.109.1.1.1.1.7,1.3.6.1.4.1.9.9.109.1.1.1.1.8,1.3.6.1.4.1.9.9.109.1.1.1.1.12,1.3.6.1.4.1.9.9.109.1.1.1.1.13
snmp_mode = attributes
snmp_version = 3
sourcetype = snmp_test1
split_bulk_output = 1
trap_rdns = 0
v3_authKey = ********
v3_authProtocol = usmHMACSHAAuthProtocol
v3_privProtocol = usmAesCfb128Protocol
v3_securityName = ********
v3_privKey = ********
mib_names = CISCO-PROCESS-MIB
disabled = 0
snmpinterval = 300
interval = 300

As the MIBS are already python compiled in the other envs, I've just copied them over. I'm probably missing something blindingly obvious. But if anyone has any ideas, I would be very grateful.

I've also tried an snmpwalk from the collector server and that seems to run ok.

snmpwalk -v3 -l authPriv -u splunk -a SHA -A "********" -x AES -X "********" xxx.xxx.xxx.xxx

SNMPv2-MIB::sysDescr.0 = STRING: Cisco NX-OS(tm) m9100, Software (m9100-s5ek9-mz), Version 6.2(19), RELEASE SOFTWARE >
Copyright (c) 2002-2013 by Cisco Systems, Inc. Compiled 1/30/2017 23:00:00
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.12.3.1.3.1491
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (2288470610) 264 days, 20:51:46.10
SNMPv2-MIB::sysContact.0 = STRING: aname
SNMPv2-MIB::sysName.0 = STRING: aname

Labels (1)
1 Solution

cdstealer
Contributor

OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!

View solution in original post

0 Karma

johnnytam29
New Member

Mind to tell how to install?

0 Karma

johnnytam29
New Member

i found solution.

You need to pip install pycryptodome package, and copy out the Cipher folder from the package to /opt/splunk/etc/apps/snmp_ta/bin/Cipher. Initially my snmp_ta is using python version 2, after pasting to bin, you need to change to python version 3 to make it work.

Version:

snmp_ta=1.6.5

splunk =9.0.2

Hope it helps someone who having the same issue.

0 Karma

cdstealer
Contributor

OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!

0 Karma

kristine_pamati
Engager

Hi! so how did you install?

0 Karma

ygdrassilp
Explorer

also wanna know how did you install it

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...