SNMP Modular Inpout - not able to poll more than three devices with a single input

[kmueller68]

Hello.

I am running SNMP Modular Input version 1.5 on Splunk Enterprise 7.2.7.

I have setup the following SNMP input to poll the power supply status from switches.
I am able to poll up to three IP addresses simultaneously with this input.

But as soon as I add a fourth or fifth IP address to be polled, things are becoming weird.
It changes if only 1, or 2 or mabye 3 IPs are polled but never all 4 or 5.
I will need to go up to 28 IPs to be polled by this SNMP input.

I have added the error messages form the splunkd.log file.

Has please anyone an idea whats going wrong here?

Thank you
Karl

[snmp://Switch Power Supplies]
activation_key = 91C3A8052D3B6BB033AC165FDF24462E
communitystring = snmpcommunity
destination = 192.168.1.101,192.168.1.102,192.168.1.103,192.168.1.104
do_bulk_get = 0
do_get_subtree = 0
index = snmppoller
ipv6 = 0
object_names = 1.3.6.1.4.1.1588.2.1.1.1.1.22.1.3.7,1.3.6.1.4.1.1588.2.1.1.1.1.22.1.3.8
snmp_mode = attributes
snmp_version = 2C
snmpinterval = 120
sourcetype = snmp_ta
split_bulk_output = 0
trap_rdns = 0
v3_authProtocol = usmHMACMD5AuthProtocol
v3_privProtocol = usmDESPrivProtocol
port = 161

05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" Exception with getCmd to 192.168.1.104:161: poll error: Traceback (most recent call last):
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\pysnmp-4.2.5-py2.7.egg\pysnmp\carrier\asynsock\dispatch.py", line 37, in runDispatcher
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" use_poll=True, map=self.__sockMap, count=1)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 220, in loop
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" poll_fun(timeout, map)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 156, in poll
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" read(obj)
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 87, in read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" obj.handle_error()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 83, in read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" obj.handle_read_event()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\Python-2.7\Lib\asyncore.py", line 449, in handle_read_event
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" self.handle_read()
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ; File "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\pysnmp-4.2.5-py2.7.egg\pysnmp\carrier\asynsock\dgram\base.py", line 91, in handle_read
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" raise error.CarrierError('recvfrom() failed: %s' % (sys.exc_info()[1],))
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" ;CarrierError: recvfrom() failed: [Errno 10035] A non-blocking socket operation could not be completed immediately
05-15-2020 15:14:24.987 +0200 ERROR ExecProcessor - message from "python "D:\Program Files\Splunk\etc\apps\snmp_ta\bin\snmp.py"" snmp_stanza:snmp://Switch Power Supplies

[PavelP]

Hello @kmueller68

most relevant log line is

CarrierError: recvfrom() failed: [Errno 10035] A non-blocking socket operation could not be completed immediately

there are many possible solutions/suggestions - google for "python Errno 10035".

Will it work if you increase the snmpinterval ?