All Apps and Add-ons

SNMP Modular Input - MIB file not found in path

ragkna
New Member

Hello Experts,

Splunk is not my area, but need to integrate with a product which I work on. I have read and configured SNMP modular input in Splunk. In the Splunk SNMP configuration, I'm trying to poll my device to get its stats. The device has got 3 MIB files which converted to python modules. First I tried by keeping .py files in '.../mibs' folder (as directed) and then packaged these files to .egg as the first try did not work out. In both cases, I get below error in splunkd.log:

02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" Traceback (most recent call last):
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/Applications/splunk/etc/apps/snmp_ta/bin/snmp.py", line 678, in
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" do_run()
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/Applications/splunk/etc/apps/snmp_ta/bin/snmp.py", line 424, in do_run
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" mibBuilder.loadModules(*mib_names_args)
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/Applications/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 270, in loadModules
02-20-2014 22:53:49.784 +1100 ERROR ExecProcessor - message from "python /Applications/splunk/etc/apps/snmp_ta/bin/snmp.py" pysnmp.smi.error.SmiError: MIB file "pythondpmibs-0.1-py3.3.egg.py[co]" not found in search path

Do I miss any steps? I tried same approach by installing Splunk on a Windows 7 and Mac OS X and got the same error as above.

I even tested my device configs through MIB browser which yields stats perfectly.
I've configured latest version (1.2.1) of SNMP modular input.

Tags (1)
0 Karma

Damien_Dallimor
Ultra Champion

You most likely haven't declared your MIB name properly in your setup stanza.

So if you have FOO.MIB and you generate FOO.py and you put FOO.py in the snmp_ta/bin/mibs directory , then this is what the MIB Names field should look like in your setup :

alt text

0 Karma

jadengoho
Builder

Did you solve this problem ?
and can you relink the image i cant see it .

You most likely haven't declared your MIB name properly in your setup stanza.

So if you have FOO.MIB and you generate FOO.py and you put FOO.py in the snmp_ta/bin/mibs directory , then this is what the MIB Names field should look like in your setup :

alt text
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...