All Apps and Add-ons

SNMP Modular Input not working. Error with snmp.py

johnyonemoto8
Explorer

What are causing these errors?
04-24-2015 21:21:48.936 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Traceback (most recent call last):
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 771, in
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" do_run()
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 475, in do_run
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" mibBuilder.loadModules(*mib_names_args)
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 259, in loadModules
04-24-2015 21:21:48.937 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" pysnmp.smi.error.SmiError: MIB module "/opt/splunk/etc/apps/snmp_ta/bin/mibs/Rx8000-AUDIO.mib.py" load error: ['Traceback (most recent call last):\n', ' File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 255, in loadModules\n exec(modData, g)\n', ' File "", line 7, in \n', ' File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 294, in importSymbols\n \'importSymbols: empty MIB module name\'\n', 'SmiError: importSymbols: empty MIB module name\n']

[snmp://test]
destination = 
do_bulk_get = 0
do_get_subtree = 0
ipv6 = 0
mib_names = Rx8000-AUDIO.mib, Rx8000_base.mib, RX8000-BASE.mib,Rx8000-VIDEO.mib
object_names = 1.3.6.1.4.1.1773.1.3.208.3.3.3.0, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.1, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.2, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.3, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.4, 1.3.6.1.4.1773.1.3.208.3.3.9.0
response_handler_args =
snmp_mode = attributes
snmp_version = 2C
sourcetype = snmp
split_bulk_output = 0
trap_rdns = 0
v3_authProtocol = usmHMACMD5AuthProtocol
v3_privProtocol = usmDESPrivProtocol
Tags (1)

Damien_Dallimor
Ultra Champion
mib_names = Rx8000-AUDIO.mib, Rx8000_base.mib, RX8000-BASE.mib,Rx8000-VIDEO.mib

Have you converted your MIBs to python modules correctly (as per the docs) ?

johnyonemoto8
Explorer

Yes. Converted MIBs to python modules as per your instructions, (Rx8000-AUDIO.mib.py, Rx8000_base.mib.py, RX8000-BASE.mib.py and Rx8000-VIDEO.mib.py) placed in SPLUNK_HOME/etc/apps/snmp_ta/bin/mibs directory

0 Karma

Damien_Dallimor
Ultra Champion

If your raw mib is named Rx8000-AUDIO.mib , then this should be output to Rx8000-AUDIO.py, placed in SPLUNK_HOME/etc/apps/snmp_ta/bin/mibs , and then in the config be specified as Rx8000-AUDIO

Try that.

0 Karma

rsennett_splunk
Splunk Employee
Splunk Employee

you probably want to show your input stanza... it will be in inputs.conf and start something like this:
[snmp://nameofyourinput]

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!
0 Karma

johnyonemoto8
Explorer

[snmp://test]
destination =
do_bulk_get = 0
do_get_subtree = 0
ipv6 = 0
mib_names = Rx8000-AUDIO.mib, Rx8000_base.mib, RX8000-BASE.mib,Rx8000-VIDEO.mib
object_names = 1.3.6.1.4.1.1773.1.3.208.3.3.3.0, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.1, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.2, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.3, 1.3.6.1.4.1.1773.1.3.208.3.4.3.1.2.4, 1.3.6.1.4.1773.1.3.208.3.3.9.0
response_handler_args =
snmp_mode = attributes
snmp_version = 2C
sourcetype = snmp
split_bulk_output = 0
trap_rdns = 0
v3_authProtocol = usmHMACMD5AuthProtocol
v3_privProtocol = usmDESPrivProtocol

0 Karma
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...