# Can't receive snmp trap
**URL:** https://discuss.elastic.co/t/cant-receive-snmp-trap/124958
**Category:** Logstash
**Created:** [March 21, 2018, 10:12am UTC](https://discuss.elastic.co/t/cant-receive-snmp-trap/124958 "2018-03-21T10:12:34Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@vdoraikannan](https://discuss.elastic.co/u/vdoraikannan)
#### Post date: [March 21, 2018, 10:12am UTC](https://discuss.elastic.co/t/cant-receive-snmp-trap/124958/1 "2018-03-21T10:12:35Z")
Logstash configuration file
input {
snmptrap {
host =\> "0.0.0.0"
port =\> 1062
type =\> "snmp\_trap"
community =\> "public"
}
}
output {
elasticsearch {
hosts =\> "localhost:9200"
index =\> "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}
logstash log file :
[2018-03-20T00:10:51,310][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.2.2"}
[2018-03-20T00:10:51,585][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}
[2018-03-20T00:10:53,506][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>1, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50}
[2018-03-20T00:10:54,301][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=\>{:removed=\>[], :added=\>[[http://localhost:9200/](http://localhost:9200/)]}}
[2018-03-20T00:10:54,306][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[http://localhost:9200/](http://localhost:9200/), :path=\>"/"}
[2018-03-20T00:10:54,595][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"[http://localhost:9200/](http://localhost:9200/)"}
[2018-03-20T00:10:54,726][INFO][logstash.outputs.elasticsearch] ES Output version determined {:es\_version=\>nil}
[2018-03-20T00:10:54,727][WARN][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document \_type {:es\_version=\>6}
[2018-03-20T00:10:54,732][INFO][logstash.outputs.elasticsearch] Using mapping template from {:path=\>nil}
[2018-03-20T00:10:54,764][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"template"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynamic\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}}}
[2018-03-20T00:10:54,852][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=\>"LogStash::Outputs::ElasticSearch", :hosts=\>["[//localhost:9200](https://localhost:9200)"]}
[2018-03-20T00:10:54,942][INFO][logstash.pipeline] Pipeline started succesfully {:pipeline\_id=\>"main", :thread=\>"#\"}
[2018-03-20T00:10:54,999][INFO][logstash.inputs.snmptrap] It's a Trap! {:Port=\>1062, :Community=\>["public"], :Host=\>"0.0.0.0"}
[2018-03-20T00:10:55,017][INFO][logstash.agent] Pipelines running {:count=\>1, :pipelines=\>["main"]}
+++++++++++++++++++++++++++++++++++++++++++++++++++
i changed the logstash configuration file to
input {
snmptrap {
host =\> "0.0.0.0"
port =\> 1062
type =\> "snmp\_trap"
community =\> "public"
}
}
{
stdout =\> { codec =\> json}
}
logstash log file look like
[2018-03-20T00:08:10,823][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/usr/share/logstash/modules/fb\_apache/configuration"}
[2018-03-20T00:08:10,837][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"}
[2018-03-20T00:08:12,217][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.2.2"}
[2018-03-20T00:08:12,557][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}
[2018-03-20T00:08:12,963][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 17, column 1 (byte 257) after ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:51:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:169:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:315:in `block in converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in`with\_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:312:in `block in converge_state'", "org/jruby/RubyArray.java:1734:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:299:in `converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:166:in`block in converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in`converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:90:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:348:in`block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}
[2018-03-20T00:09:04,833][INFO][logsta
anyone can help..
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 18, 2018, 10:12am UTC](https://discuss.elastic.co/t/cant-receive-snmp-trap/124958/2 "2018-04-18T10:12:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.