Getting Data In

how to line break snmp data

ahmedhassanean
Explorer

Dears,

i have configured scripted input that poll snmp of network devices using snmpwalk command but problem that walk come back to me as one events with 3000 line i would like to know how to break each line as event . please find below sample of output

IF-MIB::ifIndex.80 = 80
IF-MIB::ifIndex.736 = 736
IF-MIB::ifIndex.752 = 752
IF-MIB::ifIndex.768 = 768
IF-MIB::ifIndex.784 = 784
IF-MIB::ifIndex.800 = 800
IF-MIB::ifIndex.816 = 816
IF-MIB::ifIndex.832 = 832
IF-MIB::ifIndex.848 = 848
IF-MIB::ifIndex.864 = 864
IF-MIB::ifIndex.880 = 880
IF-MIB::ifIndex.928 = 928
IF-MIB::ifIndex.944 = 944
IF-MIB::ifIndex.960 = 960

0 Karma

DMohn
Motivator

If the events in your input are line separated, you should use the setting SHOULD_LINEMERGE = false in your props.conf (which normally defaults to true. This will split your input into one event per line.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...