All Apps and Add-ons

SNMP Modular Inpout - not able to poll more than three devices with a single input

New Member

Hello.

I am running SNMP Modular Input version 1.5 on Splunk Enterprise 7.2.7.

I have setup the following SNMP input to poll the power supply status from switches.
I am able to poll up to three IP addresses simultaneously with this input.

But as soon as I add a fourth or fifth IP address to be polled, things are becoming weird.
It changes if only 1, or 2 or mabye 3 IPs are polled but never all 4 or 5.
I will need to go up to 28 IPs to be polled by this SNMP input.

I have added the error messages form the splunkd.log file.

Has please anyone an idea whats going wrong here?

Thank you
Karl

[snmp://Switch Power Supplies]
activation_key = 91C3A8052D3B6BB033AC165FDF24462E
communitystring = snmpcommunity
destination = 192.168.1.101,192.168.1.102,192.168.1.103,192.168.1.104
do_bulk_get = 0
do_get_subtree = 0
index = snmppoller
ipv6 = 0
object_names = 1.3.6.1.4.1.1588.2.1.1.1.1.22.1.3.7,1.3.6.1.4.1.1588.2.1.1.1.1.22.1.3.8
snmp_mode = attributes
snmp_version = 2C
snmpinterval = 120
sourcetype = snmp_ta
split_bulk_output = 0
trap_rdns = 0
v3_authProtocol = usmHMACMD5AuthProtocol
v3_privProtocol = usmDESPrivProtocol
port = 161

05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" Exception with getCmd to 192.168.1.104:161: poll error: Traceback (most recent call last):
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\pysnmp-4.2.5-py2.7.egg\pysnmp\carrier\asynsock\dispatch.py", line 37, in runDispatcher
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" use_poll=True, map=self.__sockMap, count=1)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 220, in loop
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" poll_fun(timeout, map)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 156, in poll
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" read(obj)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 87, in read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" obj.handle_error()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 83, in read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" obj.handle_read_event()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 449, in handle_read_event
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" self.handle_read()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\pysnmp-4.2.5-py2.7.egg\pysnmp\carrier\asynsock\dgram\base.py", line 91, in handle_read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" raise error.CarrierError('recvfrom() failed: %s' % (sys.exc_info()[1],))
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ;CarrierError: recvfrom() failed: [Errno 10035] A non-blocking socket operation could not be completed immediately
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" snmp_stanza:snmp://Switch Power Supplies

0 Karma

Motivator

Hello @kmueller68

most relevant log line is

CarrierError: recvfrom() failed: [Errno 10035] A non-blocking socket operation could not be completed immediately

there are many possible solutions/suggestions - google for "python Errno 10035".

Will it work if you increase the snmpinterval ?

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!