All Apps and Add-ons

poll all interfaces?

tmarlette
Motivator

I was just wondering if there was a way to monitor all interfaces with something like a wildcard?

for example, instead of:

[snmpif://myDevice]
destination = 10.10.10.10
port = 161
snmp_version = 2C
interfaces = 1,2,3,4,5,6,7,8,9,10
communitystring = idnbigdata
snmpinterval = 60
index = myIndex
sourcetype = snmp:if
disabled = 0

I could instead have something that looked like this:

[snmpif://myDevice]
destination = 10.10.10.10
port = 161
snmp_version = 2C
interfaces = * / ALL
communitystring = idnbigdata
snmpinterval = 60
index = myIndex
sourcetype = snmp:if
disabled = 0

Is this possible to do, or do I have list everything?

0 Karma
1 Solution

tmarlette
Motivator

After Contacting the developer of the app, there is now 'wildcard' function. Each input much be designated appropriately.

View solution in original post

0 Karma

tmarlette
Motivator

After Contacting the developer of the app, there is now 'wildcard' function. Each input much be designated appropriately.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...