All Apps and Add-ons

SNMP event

punithjigali
Explorer

How to configure Univesal fowarder to send snmp traps in unix server and how to collect?
whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance?
can we use syslog for snmp traps??

0 Karma

PavelP
Motivator

Hello @punithjigali ,

to send snmp traps from a linux host:

  • install and configure snmp to send traps independently from splunk
  • configure script input to run snmptrap command periodically

how to collect SNMP described here: https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/SendSNMPeventstoSplunk

whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance? - it depends on where you want to capture SNMP input - on Indexer or on HF, on UF too, but you have to configure it manually, because UF has no UI.

can we use syslog for snmp traps - yes, snmp deamon can collect traps and write them to log, and syslog can read this log and send events to Splunk. Alternatevely UF can read the log and send events to Splunk.

There are many options, choose what suits you best.

Let me know if it helps

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...