SNMP cant get any poll data

[jadengoho]

HI Everyone,
just want to know why i dont get any data from snmp_ta
heere is my splunkd.log

5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400 
 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Traceback (most recent call last):
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd

5/9/18 3:20:33.908 AM   05-09-2018 03:20:33.908 -0400 
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py"   File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 771, in <module>
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd

5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py"     do_run()
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd
5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400
 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py"   File "/opt/splunk/etc/apps/snmp_ta/bin/snmp.py", line 475, in do_run
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd

5/9/18 3:20:33.908 AM 05-09-2018 03:20:33.908 -0400 
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py"     mibBuilder.loadModules(*mib_names_args)
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd

5/9/18
3:20:33.908 AM 05-09-2018 03:20:33.908 -0400 
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py"   File "/opt/splunk/etc/apps/snmp_ta/bin/pysnmp-4.2.5-py2.7.egg/pysnmp/smi/builder.py", line 270, in loadModules
host =  prd-usc1-a-splunk-hf1 source =  /opt/splunk/var/log/splunk/splunkd.log sourcetype = splunkd

5/9/18 3:20:33.908 A 05-09-2018 03:20:33.908 -0400 
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" pysnmp.smi.error.SmiError: MIB file "MATRIXX-SMI.py.py[co]" not found in search path

Did i miss something , its same like this one :
https://answers.splunk.com/answers/123794/snmp-modular-input-mib-file-not-found-in-path.html
but no image indicated below i cant see it , so i cant really resolve this problem.

[deepashri_123]

Hey jadengoho,

Have you added pycrypto package ?
Refer the steps in this link:
https://splunkbase.splunk.com/app/1537/#/details

Let me know if this helps!!

[jadengoho]

Is that needed since we are using snmp v2C ?

[xpac · Accepted solution]

Hey,

the actual error message is in your last line:
MIB file "MATRIXX-SMI.py.py[co]" not found in search path

The picture in the post you mentioned is this:

Did you either select the proper MIB file as mentioned here in the docs for the TA, or built yourself a custom one and properly placed it, as also mentioned in that doc?

[jadengoho]

i mistakenly input MATRIXX-SMI.py in MIB (snmp manager) but change it to just "MATRIXX-SMI"
But still getting this error ,

MIB file "MATRIXX-SMI.py.py[co]" not found in search path

And yes i put the make a .egg file and put on the /snmp_ta/bin/mibs