# Logstash snmp integration plugin doesn't work

**URL:** <https://discuss.elastic.co/t/logstash-snmp-integration-plugin-doesnt-work/377181>\
**Category:** Logstash\
**Created:** [April 16, 2025, 8:10am UTC](https://discuss.elastic.co/t/logstash-snmp-integration-plugin-doesnt-work/377181 "2025-04-16T08:10:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dth\_Revan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dth_revan/32/147877_2.png) [@Dth\_Revan](https://discuss.elastic.co/u/Dth_Revan)\
**Post date:** [April 16, 2025, 8:10am UTC](https://discuss.elastic.co/t/logstash-snmp-integration-plugin-doesnt-work/377181/1 "2025-04-16T08:10:13Z")

</div>

Hello, everybody!

I wanted to try a logstash snmp plugin to get metrics from physical devices to migrate completely from zabbix to ELK. I spent very much time, but it doesn't work still...  
I'm going to describe my env. so it is a test cluster, which has 3 elasticsearch+kibana nodes + 1 logstash node separately. elastic nodes have all the roles. I use 8.17.4 ELK stack version. logstash works on pipelines:

1. "main", that redirects all requests from beats to specific pipelines
2. "snmp", that i made couple days ago  
so here is the configuration from /etc/logstash/pipelines.yml. i will include only "snmp" configuration

```auto
- pipeline.id: snmp
  path.config: "/etc/logstash/conf.d/pipelines/snmp/*.conf"

```

next i have /etc/logstash/conf.d/pipelines/snmp/snmp.input.conf

```auto
input {
  snmp {
    hosts => [{ host => "udp:x.x.x.x/161" community => "public" version => "1" retries => 3 timeout => 5000 }
    ]
    walk => ["1.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0"]
    interval => 60
    ecs_compatibility => "disabled" #i don't know actually why i need this
    add_field => { #to group different devices and set proper alerting
      "cluster" => "test_cluster"
      "environment" => "test"
      "location" => "some_location"
    }
  }
}

```

output file lies also there and leads to elasticsearch

```auto
output {
  elasticsearch {
    hosts => ["https://y.y.y.1:9200","https://y.y.y.2:9200","https://y.y.y.3:9200"]
      index => "snmp-%{[environment]}"
...

```

needed plugin is already installed from the box, but just in case i used next command to make you sure  
/usr/share/logstash/bin/logstash-plugin list | grep snmp

```auto
logstash-integration-snmp
 ├── logstash-input-snmp
 └── logstash-input-snmptrap

```

i used also these commands from the logstash server to check if there are any network or something restrictions

1. snmpwalk -v1 -c public x.x.x.x 1.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0

```auto
iso.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0 = INTEGER: 283

```

1. snmpget -v1 -c public x.x.x.x 1.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0

```auto
iso.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0 = INTEGER: 278

```

it is temperature, so its okay that it changes

so...everything looks like that it's configured right but it doesn't work, i have worked on many-many errors, but currently i get this  
tail -f /var/log/logstash/logstash-plain.log

```auto
[2025-04-16T12:58:40,694][ERROR][org.logstash.snmp.SnmpClientRequestAggregator][snmp][85b9ab5811daf09d9189eec21728c97d800489c9706b4facc03142a664f79bdb] error invoking `walk` operation: error sending snmp walk request to target x.x.x.x/161: Request timed out., ignoring. {host=x.x.x.x/161, oids=[1.3.6.1.4.1.318.1.1.13.3.3.1.2.2.7.0]}

```

also there is no single example of working snmp module configuration in internet, and i hope mine will be first.

Please help, guys!

---

<div class="post-metadata">

**Author:** ![Dth\_Revan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dth_revan/32/147877_2.png) [@Dth\_Revan](https://discuss.elastic.co/u/Dth_Revan)\
**Post date:** [May 22, 2025, 12:36pm UTC](https://discuss.elastic.co/t/logstash-snmp-integration-plugin-doesnt-work/377181/2 "2025-05-22T12:36:49Z")

</div>

UP! UP!