Getting Data In

how to line break snmp data

ahmedhassanean
Explorer

Dears,

i have configured scripted input that poll snmp of network devices using snmpwalk command but problem that walk come back to me as one events with 3000 line i would like to know how to break each line as event . please find below sample of output

IF-MIB::ifIndex.80 = 80
IF-MIB::ifIndex.736 = 736
IF-MIB::ifIndex.752 = 752
IF-MIB::ifIndex.768 = 768
IF-MIB::ifIndex.784 = 784
IF-MIB::ifIndex.800 = 800
IF-MIB::ifIndex.816 = 816
IF-MIB::ifIndex.832 = 832
IF-MIB::ifIndex.848 = 848
IF-MIB::ifIndex.864 = 864
IF-MIB::ifIndex.880 = 880
IF-MIB::ifIndex.928 = 928
IF-MIB::ifIndex.944 = 944
IF-MIB::ifIndex.960 = 960

0 Karma

DMohn
Motivator

If the events in your input are line separated, you should use the setting SHOULD_LINEMERGE = false in your props.conf (which normally defaults to true. This will split your input into one event per line.

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...