Hello im trying to get snmp documents but some events are missing and i am looking for help. thanks in advance
snmp2.conf
input{
snmp {
tables => [{
"name" => "ifTable"
"columns" => [
"1.3.6.1.2.1.2.2.1.1",
"1.3.6.1.2.1.2.2.1.2",
"1.3.6.1.2.1.2.2.1.3",
"1.3.6.1.2.1.2.2.1.4",
"1.3.6.1.2.1.2.2.1.5",
"1.3.6.1.2.1.2.2.1.6",
"1.3.6.1.2.1.31.1.1.1.6",
"1.3.6.1.2.1.31.1.1.1.10",
"1.3.6.1.2.1.31.1.1.1.7",
"1.3.6.1.2.1.31.1.1.1.11",
"1.3.6.1.2.1.2.2.1.8",
"1.3.6.1.4.1.14988.1.1.2.1.1.8",
"1.3.6.1.4.1.14988.1.1.2.1.1.9",
"1.3.6.1.4.1.14988.1.1.2.1.1.3",
"1.3.6.1.4.1.14988.1.1.2.1.1.2"]
}]
hosts => [{
host => "udp:192.168.88.1/161" community => "public" version => "2c" retries => 2 timeout => 1000
}]
interval => 60
oid_path_length => 2
add_field => { "device_ip" => "192.168.88.1" "device_name" => "Core_Capa3_LaCastellana" "location" => "10.508494, -66.856844"}
}
}
output{stdout{}}
command used for execution
sudo /usr/share/logstash/bin/logstash --path.settings /etc/logstash/ -f /etc/logstash/conf.d/snmp2.conf
Using bundled JDK: /usr/share/logstash/jdk
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
Sending Logstash logs to /var/log/logstash which is now configured via log4j2.properties
[2022-03-28T21:35:18,234][INFO ][logstash.runner ] Log4j configuration path used is: /etc/logstash/log4j2.properties
[2022-03-28T21:35:18,243][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"8.1.1", "jruby.version"=>"jruby 9.2.20.1 (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.14.1+1 on 11.0.14.1+1 +indy +jit [linux-x86_64]"}
[2022-03-28T21:35:18,245][INFO ][logstash.runner ] JVM bootstrap flags: [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -Djruby.jit.threshold=0, -Djruby.regexp.interruptible=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED]
[2022-03-28T21:35:18,689][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2022-03-28T21:35:20,387][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600, :ssl_enabled=>false}
[2022-03-28T21:35:21,393][INFO ][org.reflections.Reflections] Reflections took 190 ms to scan 1 urls, producing 120 keys and 417 values
[2022-03-28T21:35:22,151][INFO ][logstash.javapipeline ] Pipeline main is configured with pipeline.ecs_compatibility: v8 setting. All plugins in this pipeline will default to ecs_compatibility => v8 unless explicitly configured otherwise.
[2022-03-28T21:35:22,279][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>10, "pipeline.batch.size"=>250, "pipeline.batch.delay"=>100, "pipeline.max_inflight"=>2500, "pipeline.sources"=>["/etc/logstash/conf.d/snmp2.conf"], :thread=>"#<Thread:0x51476d49 run>"}
[2022-03-28T21:35:23,175][INFO ][logstash.javapipeline ][main] Pipeline Java execution initialization time {"seconds"=>0.89}
[2022-03-28T21:35:23,228][INFO ][logstash.inputs.snmp ][main] using plugin provided MIB path /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-snmp-1.3.1/lib/mibs/logstash
[2022-03-28T21:35:23,253][INFO ][logstash.inputs.snmp ][main] using plugin provided MIB path /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-snmp-1.3.1/lib/mibs/ietf
[2022-03-28T21:35:26,007][INFO ][logstash.inputs.snmp ][main] ECS compatibility is enabled but target option was not specified. This may cause fields to be set at the top-level of the event where they are likely to clash with the Elastic Common Schema. It is recommended to set the target option to avoid potential schema conflicts (if your data is ECS compliant or non-conflicting, feel free to ignore this message)
[2022-03-28T21:35:26,011][INFO ][logstash.javapipeline ][main] Pipeline started {"pipeline.id"=>"main"}
[2022-03-28T21:35:26,069][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
{
"device_ip" => "192.168.88.1",
"@version" => "1",
"device_name" => "Core_Capa3_LaCastellana",
"ifTable" => [
[ 0] {
"ifOperStatus" => 1,
"ifHCInOctets" => 20946509714752,
"ifPhysAddress" => "74:4d:28:93:28:31",
"ifMtu" => 1500,
"ifSpeed" => 1000000000,
"ifDescr" => "ether1",
"ifHCOutUcastPkts" => 7519130101,
"ifIndex" => 1,
"ifType" => 6,
"ifHCInUcastPkts" => 16261645743,
"index" => "1",
"ifHCOutOctets" => 2847396556358
},
[ 1] {
"ifOperStatus" => 1,
"ifHCInOctets" => 2842520379351,
"ifPhysAddress" => "74:4d:28:93:28:32",
"ifMtu" => 1500,
"ifSpeed" => 1000000000,
"ifDescr" => "ether2",
"ifHCOutUcastPkts" => 16186095614,
"ifIndex" => 2,
"ifType" => 6,
"ifHCInUcastPkts" => 7529180184,
"index" => "2",
"ifHCOutOctets" => 20901471945146
},
[ 2] {
"ifOperStatus" => 1,
"ifHCInOctets" => 9797483571,
"ifPhysAddress" => "74:4d:28:93:28:33",
"ifMtu" => 1500,
"ifSpeed" => 1000000000,
"ifDescr" => "ether3",
"ifHCOutUcastPkts" => 85739,
"ifIndex" => 3,
"ifType" => 6,
"ifHCInUcastPkts" => 14495432,
"index" => "3",
"ifHCOutOctets" => 12811359
},
[ 3] {
"ifOperStatus" => 1,
"ifHCInOctets" => 63770940,
"ifPhysAddress" => "74:4d:28:93:28:34",
"ifMtu" => 1500,
"ifSpeed" => 100000000,
"ifDescr" => "ether4",
"ifHCOutUcastPkts" => 5470827,
"ifIndex" => 4,
"ifType" => 6,
"ifHCInUcastPkts" => 466684,
"index" => "4",
"ifHCOutOctets" => 621661508
},
[ 4] {
"ifOperStatus" => 1,
"ifHCInOctets" => 6776863531,
"ifPhysAddress" => "74:4d:28:93:28:35",
"ifMtu" => 1500,
"ifSpeed" => 1000000000,
"ifDescr" => "ether5",
"ifHCOutUcastPkts" => 29925267,
"ifIndex" => 5,
"ifType" => 6,
"ifHCInUcastPkts" => 14407348,
"index" => "5",
"ifHCOutOctets" => 30013209610
},
[ 5] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:36",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ether6",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 6,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "6",
"ifHCOutOctets" => 0
},
[ 6] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:37",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ether7",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 7,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "7",
"ifHCOutOctets" => 0
},
[ 7] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:38",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ether8",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 8,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "8",
"ifHCOutOctets" => 0
},
[ 8] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:39",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ether9",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 9,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "9",
"ifHCOutOctets" => 0
},
[ 9] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:3a",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ether10",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 10,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "10",
"ifHCOutOctets" => 0
},
[10] {
"ifOperStatus" => 2,
"ifHCInOctets" => 0,
"ifPhysAddress" => "74:4d:28:93:28:3b",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "sfp-sfpplus1",
"ifHCOutUcastPkts" => 0,
"ifIndex" => 11,
"ifType" => 6,
"ifHCInUcastPkts" => 0,
"index" => "11",
"ifHCOutOctets" => 0
},
[11] {
"ifOperStatus" => 1,
"ifHCInOctets" => 2711192148803,
"ifPhysAddress" => "74:4d:28:93:28:32",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "bridge",
"ifHCOutUcastPkts" => 16211132241,
"ifIndex" => 12,
"ifType" => 209,
"ifHCInUcastPkts" => 7542845606,
"index" => "12",
"ifHCOutOctets" => 20864486584466
},
[12] {
"ifOperStatus" => 1,
"ifHCInOctets" => 279249100,
"ifPhysAddress" => "fe:c7:ce:d5:04:de",
"ifMtu" => 1500,
"ifSpeed" => 0,
"ifDescr" => "ovpn-MABELEN",
"ifHCOutUcastPkts" => 2381571,
"ifIndex" => 15,
"ifType" => 1,
"ifHCInUcastPkts" => 2048594,
"index" => "15",
"ifHCOutOctets" => 455648171
},
[13] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.226",
"mtxrQueueSimpleBytesIn" => 14472,
"mtxrQueueSimpleName" => "DORA-22-A.74:4D:28:F9:21:8E",
"mtxrQueueSimpleBytesOut" => 30476,
"index" => "294"
},
[14] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.229",
"mtxrQueueSimpleBytesIn" => 989660654,
"mtxrQueueSimpleName" => "DORA-32-A.C4:AD:34:BE:26:66",
"mtxrQueueSimpleBytesOut" => 234502770,
"index" => "295"
},
[15] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.234",
"mtxrQueueSimpleBytesIn" => 0,
"mtxrQueueSimpleName" => "DORA-51-A.94:10:3E:0B:4C:CB",
"mtxrQueueSimpleBytesOut" => 0,
"index" => "296"
},
[16] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.231",
"mtxrQueueSimpleBytesIn" => 686256476,
"mtxrQueueSimpleName" => "VIGILACIA DORAVILA.A8:BF:3C:27:9E:94",
"mtxrQueueSimpleBytesOut" => 41057025,
"index" => "297"
},
[17] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.230",
"mtxrQueueSimpleBytesIn" => 643889057,
"mtxrQueueSimpleName" => "DORA-42-B.74:4D:28:FA:38:C7",
"mtxrQueueSimpleBytesOut" => 31241950,
"index" => "298"
},
[18] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.159",
"mtxrQueueSimpleBytesIn" => 2357563430,
"mtxrQueueSimpleName" => "VIS-AV-52-C.B0:95:75:6E:B2:32",
"mtxrQueueSimpleBytesOut" => 64156135,
"index" => "299"
},
[19] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.142",
"mtxrQueueSimpleBytesIn" => 1475708391,
"mtxrQueueSimpleName" => "VIS-AV-21-A.3C:84:6A:BF:CF:AD",
"mtxrQueueSimpleBytesOut" => 64759621,
"index" => "300"
},
[20] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.138",
"mtxrQueueSimpleBytesIn" => 272377532,
"mtxrQueueSimpleName" => "VIS-AV-1-B.3C:84:6A:EC:EA:A1",
"mtxrQueueSimpleBytesOut" => 9959666,
"index" => "301"
},
[21] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.136",
"mtxrQueueSimpleBytesIn" => 14316,
"mtxrQueueSimpleName" => "VIS-AV-11-C.E8:DE:27:C5:42:B3",
"mtxrQueueSimpleBytesOut" => 11468,
"index" => "302"
},
[22] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.130",
"mtxrQueueSimpleBytesIn" => 3089292822,
"mtxrQueueSimpleName" => "Q-VAL-80.98:DA:C4:F8:F3:8B",
"mtxrQueueSimpleBytesOut" => 1234002546,
"index" => "303"
},
[23] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.147",
"mtxrQueueSimpleBytesIn" => 0,
"mtxrQueueSimpleName" => "VIS-AV-61-C.E8:9F:80:46:1A:78",
"mtxrQueueSimpleBytesOut" => 0,
"index" => "304"
},
[24] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.116",
"mtxrQueueSimpleBytesIn" => 1879288287,
"mtxrQueueSimpleName" => "QTA-59.54:75:D0:E4:7D:15",
"mtxrQueueSimpleBytesOut" => 151278423,
"index" => "305"
},
[25] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.89",
"mtxrQueueSimpleBytesIn" => 749482735,
"mtxrQueueSimpleName" => "VIS-AV-22-C.60:32:B1:F9:88:35",
"mtxrQueueSimpleBytesOut" => 40918517,
"index" => "306"
},
[26] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.233",
"mtxrQueueSimpleBytesIn" => 115769691,
"mtxrQueueSimpleName" => "DORA-21-B.A8:BF:3C:27:A1:84",
"mtxrQueueSimpleBytesOut" => 7535914,
"index" => "307"
},
[27] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.228",
"mtxrQueueSimpleBytesIn" => 254983372,
"mtxrQueueSimpleName" => "DORA-PH2-B.A8:BF:3C:27:9D:68",
"mtxrQueueSimpleBytesOut" => 17408183,
"index" => "308"
},
[28] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.235",
"mtxrQueueSimpleBytesIn" => 591202701,
"mtxrQueueSimpleName" => "DORA-42-A.A8:BF:3C:27:9F:48",
"mtxrQueueSimpleBytesOut" => 143196978,
"index" => "309"
},
[29] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.225",
"mtxrQueueSimpleBytesIn" => 986174184,
"mtxrQueueSimpleName" => "DORA-11-B.A8:BF:3C:27:A1:B4",
"mtxrQueueSimpleBytesOut" => 30259298,
"index" => "310"
},
[30] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.227",
"mtxrQueueSimpleBytesIn" => 1107080994,
"mtxrQueueSimpleName" => "DORA-31-B.A8:BF:3C:27:A1:AC",
"mtxrQueueSimpleBytesOut" => 59514326,
"index" => "311"
},
[31] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.240",
"mtxrQueueSimpleBytesIn" => 1671943771,
"mtxrQueueSimpleName" => "MURA-21-C.A8:BF:3C:27:9D:7C",
"mtxrQueueSimpleBytesOut" => 56457954,
"index" => "312"
},
[32] {
"mtxrQueueSimpleSrcAddr" => "192.168.88.237",
"mtxrQueueSimpleBytesIn" => 712037,
"mtxrQueueSimpleName" => "MURA-CONSJ.A8:BF:3C:27:9E:5C",
"mtxrQueueSimpleBytesOut" => 827731,
"index" => "313"
}
],
"location" => "10.508494, -66.856844",
"@timestamp" => 2022-03-29T01:35:26.204540Z
}
^C[2022-03-28T21:35:28,882][WARN ][logstash.runner ] SIGINT received. Shutting down.
^C[2022-03-28T21:35:29,878][FATAL][logstash.runner ] SIGINT received. Terminating immediately..
[2022-03-28T21:35:29,927][FATAL][org.logstash.Logstash ]
org.jruby.exceptions.ThreadKill: null
snmpwalk for reference
snmpwalk -v2c -cpublic 192.168.88.1 1.3.6.1.4.1.14988.1.1.2.1.1.3
iso.3.6.1.4.1.14988.1.1.2.1.1.3.294 = IpAddress: 192.168.88.226
iso.3.6.1.4.1.14988.1.1.2.1.1.3.295 = IpAddress: 192.168.88.229
iso.3.6.1.4.1.14988.1.1.2.1.1.3.296 = IpAddress: 192.168.88.234
iso.3.6.1.4.1.14988.1.1.2.1.1.3.297 = IpAddress: 192.168.88.231
iso.3.6.1.4.1.14988.1.1.2.1.1.3.298 = IpAddress: 192.168.88.230
iso.3.6.1.4.1.14988.1.1.2.1.1.3.299 = IpAddress: 192.168.88.159
iso.3.6.1.4.1.14988.1.1.2.1.1.3.300 = IpAddress: 192.168.88.142
iso.3.6.1.4.1.14988.1.1.2.1.1.3.301 = IpAddress: 192.168.88.138
iso.3.6.1.4.1.14988.1.1.2.1.1.3.302 = IpAddress: 192.168.88.136
iso.3.6.1.4.1.14988.1.1.2.1.1.3.303 = IpAddress: 192.168.88.130
iso.3.6.1.4.1.14988.1.1.2.1.1.3.304 = IpAddress: 192.168.88.147
iso.3.6.1.4.1.14988.1.1.2.1.1.3.305 = IpAddress: 192.168.88.116
iso.3.6.1.4.1.14988.1.1.2.1.1.3.306 = IpAddress: 192.168.88.89
iso.3.6.1.4.1.14988.1.1.2.1.1.3.307 = IpAddress: 192.168.88.233
iso.3.6.1.4.1.14988.1.1.2.1.1.3.308 = IpAddress: 192.168.88.228
iso.3.6.1.4.1.14988.1.1.2.1.1.3.309 = IpAddress: 192.168.88.235
iso.3.6.1.4.1.14988.1.1.2.1.1.3.310 = IpAddress: 192.168.88.225
iso.3.6.1.4.1.14988.1.1.2.1.1.3.311 = IpAddress: 192.168.88.227
iso.3.6.1.4.1.14988.1.1.2.1.1.3.312 = IpAddress: 192.168.88.240
iso.3.6.1.4.1.14988.1.1.2.1.1.3.313 = IpAddress: 192.168.88.237
iso.3.6.1.4.1.14988.1.1.2.1.1.3.314 = IpAddress: 192.168.88.232
iso.3.6.1.4.1.14988.1.1.2.1.1.3.315 = IpAddress: 192.168.88.57
iso.3.6.1.4.1.14988.1.1.2.1.1.3.316 = IpAddress: 192.168.88.244
iso.3.6.1.4.1.14988.1.1.2.1.1.3.317 = IpAddress: 192.168.88.245
iso.3.6.1.4.1.14988.1.1.2.1.1.3.318 = IpAddress: 192.168.88.213
iso.3.6.1.4.1.14988.1.1.2.1.1.3.319 = IpAddress: 192.168.88.214
iso.3.6.1.4.1.14988.1.1.2.1.1.3.320 = IpAddress: 192.168.88.242
iso.3.6.1.4.1.14988.1.1.2.1.1.3.321 = IpAddress: 192.168.88.248
iso.3.6.1.4.1.14988.1.1.2.1.1.3.322 = IpAddress: 192.168.88.249
iso.3.6.1.4.1.14988.1.1.2.1.1.3.323 = IpAddress: 192.168.88.250
iso.3.6.1.4.1.14988.1.1.2.1.1.3.324 = IpAddress: 192.168.88.253
iso.3.6.1.4.1.14988.1.1.2.1.1.3.325 = IpAddress: 192.168.88.252
iso.3.6.1.4.1.14988.1.1.2.1.1.3.326 = IpAddress: 192.168.88.66
iso.3.6.1.4.1.14988.1.1.2.1.1.3.327 = IpAddress: 192.168.88.22
iso.3.6.1.4.1.14988.1.1.2.1.1.3.328 = IpAddress: 192.168.88.62
iso.3.6.1.4.1.14988.1.1.2.1.1.3.329 = IpAddress: 192.168.88.19
iso.3.6.1.4.1.14988.1.1.2.1.1.3.330 = IpAddress: 192.168.88.87
iso.3.6.1.4.1.14988.1.1.2.1.1.3.331 = IpAddress: 192.168.88.88
iso.3.6.1.4.1.14988.1.1.2.1.1.3.332 = IpAddress: 192.168.88.91
iso.3.6.1.4.1.14988.1.1.2.1.1.3.333 = IpAddress: 192.168.88.93
iso.3.6.1.4.1.14988.1.1.2.1.1.3.334 = IpAddress: 192.168.88.98
iso.3.6.1.4.1.14988.1.1.2.1.1.3.335 = IpAddress: 192.168.88.99
iso.3.6.1.4.1.14988.1.1.2.1.1.3.336 = IpAddress: 192.168.88.16
iso.3.6.1.4.1.14988.1.1.2.1.1.3.337 = IpAddress: 192.168.88.15
iso.3.6.1.4.1.14988.1.1.2.1.1.3.338 = IpAddress: 192.168.88.14
iso.3.6.1.4.1.14988.1.1.2.1.1.3.339 = IpAddress: 192.168.88.12
iso.3.6.1.4.1.14988.1.1.2.1.1.3.340 = IpAddress: 192.168.88.17
iso.3.6.1.4.1.14988.1.1.2.1.1.3.341 = IpAddress: 192.168.88.20
iso.3.6.1.4.1.14988.1.1.2.1.1.3.342 = IpAddress: 192.168.88.25
iso.3.6.1.4.1.14988.1.1.2.1.1.3.343 = IpAddress: 192.168.88.26
iso.3.6.1.4.1.14988.1.1.2.1.1.3.344 = IpAddress: 192.168.88.59
iso.3.6.1.4.1.14988.1.1.2.1.1.3.345 = IpAddress: 192.168.88.73
iso.3.6.1.4.1.14988.1.1.2.1.1.3.346 = IpAddress: 192.168.88.77
iso.3.6.1.4.1.14988.1.1.2.1.1.3.347 = IpAddress: 192.168.88.79
iso.3.6.1.4.1.14988.1.1.2.1.1.3.348 = IpAddress: 192.168.88.81
iso.3.6.1.4.1.14988.1.1.2.1.1.3.349 = IpAddress: 192.168.88.86
iso.3.6.1.4.1.14988.1.1.2.1.1.3.350 = IpAddress: 192.168.88.103
iso.3.6.1.4.1.14988.1.1.2.1.1.3.351 = IpAddress: 192.168.88.110
iso.3.6.1.4.1.14988.1.1.2.1.1.3.352 = IpAddress: 192.168.88.111
iso.3.6.1.4.1.14988.1.1.2.1.1.3.353 = IpAddress: 192.168.88.114
iso.3.6.1.4.1.14988.1.1.2.1.1.3.354 = IpAddress: 192.168.88.120
iso.3.6.1.4.1.14988.1.1.2.1.1.3.355 = IpAddress: 192.168.88.121
iso.3.6.1.4.1.14988.1.1.2.1.1.3.356 = IpAddress: 192.168.88.143
iso.3.6.1.4.1.14988.1.1.2.1.1.3.357 = IpAddress: 192.168.88.144
iso.3.6.1.4.1.14988.1.1.2.1.1.3.358 = IpAddress: 192.168.88.153
iso.3.6.1.4.1.14988.1.1.2.1.1.3.359 = IpAddress: 192.168.88.154
iso.3.6.1.4.1.14988.1.1.2.1.1.3.360 = IpAddress: 192.168.88.156
iso.3.6.1.4.1.14988.1.1.2.1.1.3.361 = IpAddress: 192.168.88.118
iso.3.6.1.4.1.14988.1.1.2.1.1.3.362 = IpAddress: 192.168.88.162
iso.3.6.1.4.1.14988.1.1.2.1.1.3.363 = IpAddress: 192.168.88.171
iso.3.6.1.4.1.14988.1.1.2.1.1.3.364 = IpAddress: 192.168.88.177
iso.3.6.1.4.1.14988.1.1.2.1.1.3.365 = IpAddress: 192.168.88.28
iso.3.6.1.4.1.14988.1.1.2.1.1.3.366 = IpAddress: 192.168.88.42
iso.3.6.1.4.1.14988.1.1.2.1.1.3.367 = IpAddress: 192.168.88.44
iso.3.6.1.4.1.14988.1.1.2.1.1.3.368 = IpAddress: 192.168.88.48
iso.3.6.1.4.1.14988.1.1.2.1.1.3.369 = IpAddress: 192.168.88.49
iso.3.6.1.4.1.14988.1.1.2.1.1.3.370 = IpAddress: 192.168.88.61
iso.3.6.1.4.1.14988.1.1.2.1.1.3.371 = IpAddress: 192.168.88.82
iso.3.6.1.4.1.14988.1.1.2.1.1.3.372 = IpAddress: 192.168.88.84
iso.3.6.1.4.1.14988.1.1.2.1.1.3.373 = IpAddress: 192.168.88.95
iso.3.6.1.4.1.14988.1.1.2.1.1.3.374 = IpAddress: 192.168.88.104
iso.3.6.1.4.1.14988.1.1.2.1.1.3.375 = IpAddress: 192.168.88.109
iso.3.6.1.4.1.14988.1.1.2.1.1.3.376 = IpAddress: 192.168.88.123
iso.3.6.1.4.1.14988.1.1.2.1.1.3.377 = IpAddress: 192.168.88.126
iso.3.6.1.4.1.14988.1.1.2.1.1.3.378 = IpAddress: 192.168.88.129
iso.3.6.1.4.1.14988.1.1.2.1.1.3.379 = IpAddress: 192.168.88.134
iso.3.6.1.4.1.14988.1.1.2.1.1.3.380 = IpAddress: 192.168.88.137
iso.3.6.1.4.1.14988.1.1.2.1.1.3.381 = IpAddress: 192.168.88.141
iso.3.6.1.4.1.14988.1.1.2.1.1.3.382 = IpAddress: 192.168.88.149
iso.3.6.1.4.1.14988.1.1.2.1.1.3.383 = IpAddress: 192.168.88.106
iso.3.6.1.4.1.14988.1.1.2.1.1.3.384 = IpAddress: 192.168.88.30
iso.3.6.1.4.1.14988.1.1.2.1.1.3.385 = IpAddress: 192.168.88.37
iso.3.6.1.4.1.14988.1.1.2.1.1.3.386 = IpAddress: 192.168.88.38
iso.3.6.1.4.1.14988.1.1.2.1.1.3.387 = IpAddress: 192.168.88.52
pragma_admin@pragma:~$
As you index se goes from 294 to 387 but logstash only indexes from 294 to 313
logstash installed on Ubuntu 20.04.4 4GB RAM 2 Cores i5 using apt install