Getting Data In

How to integrate SNMP data sources into Splunk Enterprise?

TAE
Engager

Does anyone have suggestions on integrating a SNMP enabled device into Splunk Enterprise?  I'm very new to Splunk and have been asked to integrate an SNMP enabled device into our Splunk Enterprise.  I think I need to somehow link a Forwarder to the device and have the Forwarder act as a receiver of device's information.  Once that data is in the Forwarder, I think it should be processed by an associated Indexer and then it should be available within Splunk.  Is that correct or do I misunderstand?

Labels (3)
Tags (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

There are several ready-made apps on splunkbase for polling data with SNMP. You could try one of these.

You can also simply try wrapping simple snmpget/snmpwalk from snmp tools into some kind of script, call it from cron and save results to a file. Then you can easily ingest the data from file.

In case of SNMP traps I think it's easiest to just run snmptrapd and ingest its logs.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...