What should be the source type for SNMP traps coll...

Getting Data In

Following the instruction from here, Send SNMP events to your Splunk deployment I'm setting up the monitoring of the file al /var/log/snmp-traps. I wonder what would be the source type. I guess that there should be one defined already.

It has the following content: for example,

NET-SNMP version 5.7.3
2020-06-22 16:30:44 localhost [UDP: [127.0.0.1]:49799->[127.0.0.1]:162]:
iso.3.6.1.2.1.1.3.0 = Timeticks: (1) 0:00:00.01	iso.3.6.1.6.3.1.1.4.1.0 = OID: ccitt.1
2020-06-22 16:50:44 localhost [UDP: [127.0.0.1]:59061->[127.0.0.1]:162]:
iso.3.6.1.2.1.1.3.0 = Timeticks: (1) 0:00:00.01	iso.3.6.1.6.3.1.1.4.1.0 = OID: ccitt.1
2020-06-22 16:50:48 localhost [UDP: [127.0.0.1]:59062->[127.0.0.1]:162]:
iso.3.6.1.2.1.1.3.0 = Timeticks: (1) 0:00:00.01	iso.3.6.1.6.3.1.1.4.1.0 = OID: ccitt.1
2020-06-22 17:21:36 localhost [UDP: [127.0.0.1]:58259->[127.0.0.1]:162]:
iso.3.6.1.2.1.1.3.0 = Timeticks: (1) 0:00:00.01	iso.3.6.1.6.3.1.1.4.1.0 = OID: ccitt.1

Thanks for your help!

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...