Elastic Search and Logstash for SNMP

Elastic Stack Logstash
1

Hi,

I have collected the SNMP from router in Cent OS using Logstash also imported those into ES.

Now I need a clarification on this.

I have to separate MIB name and value from received message. also have to do some manipulation on this value by using corresponding formulas.
Please help how to do the following process using Logstash and Elastic search.

Before using logstash and ES, i have used SQL server and C#.

  1. Collected SNMP from server using services in C#
  2. Uploaded into MS SQL with the manipulated data using C#
  3. Retrieving the SNMP data from MS SQL and loaded that data as a chart.

Thanks in advance

2

Are you collecting the data via SNMP traps? If so you should use Logstash's snmptrap plugin. Add filter plugins to manipulate the data and finish with an elasticsearch output plugin for submitting the data to Elasticsearch. Once there, Kibana can be used for charts.

3

HI,

Thanks for your reply.

I have few more doubts. As you said, we can use filters for manipulations. Yes Of course, we can do splitting, manipulations on data. But formula will be differed based on the collected data. Is it possible to do this with Filter?

4

You can have different filters depending on the contents of the events. See https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html.