Logstash SNMP plugin

Elastic Stack Logstash
1

Hello everyone,
Can I install a plugin on my Logstash server to receive SNMP messages when my Logstash server is completely disconnected from the internet?

2

Yes, you can, there are steps for the offline installation.

3

I downloaded the Elasticsearch original plugin "logstash-input-snmp" version 1.3.3 from rubygems and tried to install it locally according to the guide you sent, but I am getting an error during the installation process stating that it cannot connect to the Rubygems service.
As a reminder, I do not have internet access on the server.

4

Which version of Logstash are you using? The snmp input is bundled in Logstash, at least on recent versions, there is no need to install it as it is already installed.

Check the documentation here, there is no Installation part on it, which means that there is no need to install this plugin as it is already bundled in Logstash.

1 Like
5

My Logstash server version is 8.11.3. Is it already built-in in this version?

6

Yes, just check the documentation, you can see the documentation for any major version by changing it on the left side menu in the documentation.

2 Likes
7

I found it, thank you.
I configured it according to the documentation:

input {
  snmptrap {
    id => "snmptrap"
  }
}

I'm sending an SNMP trap to the server's address on the default port 1062.
I can see the message being received using tcpdump, but Logstash itself isn't receiving the message, neither in the log file nor anywhere else.

8

Continue discussion on the following topic: