Getting Data In

SNMP Modular Input Custom MIB files

thaddeuslim
Explorer

Hi I am facing a problem trying to get custom MIB files to work. I have already placed converted the mib file to .py and placed it in the ./snmp_ta/bin/mibs/ folder. I have also configured the inputs.conf to look at the specific mib file.

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Exception resolving MIB value in the caught trap: Invalid sub-ID in (ObjectSyntax().setComponentByPosition(0, SimpleSyntax().setComponentByPosition(2, ObjectIdentifier(1.3.6.1.4.1.8072.2.3.2.1))), None, None, None, None) at ObjectIdentifier snmp_stanza:snmp://Thad Test

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Exception resolving MIB value in the caught trap: Can't coerce BindValue().setComponentByPosition(0, ObjectSyntax().setComponentByPosition(1, ApplicationSyntax().setComponentByPosition(2, TimeTicks(133945898)))) into integer: _BindValue instance has no attribute 'trunc_' snmp_stanza:snmp://Thad Test

Tags (2)

laurie_gellatly
Communicator

Could it be that the MIB requires a 'parent' MIB that it connects onto?
There might be an enterprise MIB and then your specific MIB required.

0 Karma

thaddeuslim
Explorer

Thank you for the comment, I think I have already included those. Currently facing these 2 errors

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Exception resolving MIB value in the caught trap: Invalid sub-ID in (ObjectSyntax().setComponentByPosition(0, SimpleSyntax().setComponentByPosition(2, ObjectIdentifier(1.3.6.1.4.1.6889.2.18.1.1.1.0.1))), None, None, None, None) at ObjectIdentifier snmp_stanza:snmp://Thad Test

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Exception resolving MIB value in the caught trap: Can't coerce BindValue().setComponentByPosition(0, ObjectSyntax().setComponentByPosition(1, ApplicationSyntax().setComponentByPosition(2, TimeTicks(133862679)))) into integer: _BindValue instance has no attribute 'trunc_' snmp_stanza:snmp://Thad Test

0 Karma

dauren_akilbeko
Communicator

Does the name of MIB in the directory match the name of MIB in the modular input? Also this might be a problem with the converted MIB.

0 Karma

thaddeuslim
Explorer

Hi Dauren, yes I have made sure to match the MIB names.

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...