# SNMP Trap Integration

**URL:** <https://discuss.elastic.co/t/snmp-trap-integration/130220>\
**Category:** Logstash\
**Created:** [May 2, 2018, 9:48am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220 "2018-05-02T09:48:31Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![ysumit](https://avatars.discourse-cdn.com/v4/letter/y/4da419/32.png) [@ysumit](https://discuss.elastic.co/u/ysumit)\
**Post date:** [May 2, 2018, 9:48am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/1 "2018-05-02T09:48:31Z")

</div>

Hi Team

Do we have any document for Integration of SNMP Traps with Logstash?

We are trying to send SNMP traps to Logstash.

Regards  
Sumit

---

<div class="post-metadata">

**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\
**Post date:** [May 3, 2018, 1:07am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/2 "2018-05-03T01:07:21Z")

</div>

There is a [SNMPTrap Input Plugin](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-snmptrap.html), which can be set up to listen for events 😄

---

<div class="post-metadata">

**Author:** ![stevehou](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@stevehou](https://discuss.elastic.co/u/stevehou)\
**Post date:** [May 3, 2018, 3:55am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/3 "2018-05-03T03:55:14Z")

</div>

Hi we have the same requirement here. we are trying to send SNMP traps from network devices.  
port =1062  
We wonder know how to integrate MIB to SNMP trap plugin?

---

<div class="post-metadata">

**Author:** ![ysumit](https://avatars.discourse-cdn.com/v4/letter/y/4da419/32.png) [@ysumit](https://discuss.elastic.co/u/ysumit)\
**Post date:** [May 3, 2018, 9:42am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/4 "2018-05-03T09:42:31Z")

</div>

Thanks for the update. However the detailed syntax/use/methodology is not documented.

Please update if team has it readily available.

Sumit

---

<div class="post-metadata">

**Author:** ![ysumit](https://avatars.discourse-cdn.com/v4/letter/y/4da419/32.png) [@ysumit](https://discuss.elastic.co/u/ysumit)\
**Post date:** [May 3, 2018, 9:43am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/5 "2018-05-03T09:43:10Z")

</div>

That is my point complete documentation not available on the link.

---

<div class="post-metadata">

**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\
**Post date:** [May 3, 2018, 2:37pm UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/6 "2018-05-03T14:37:36Z")

</div>

After looking a little closer, it looks like the SNMP Input is in active development by one of our employees, and the code as-available is in beta. Documentation and improvements will land in the coming weeks.

---

<div class="post-metadata">

**Author:** ![ysumit](https://avatars.discourse-cdn.com/v4/letter/y/4da419/32.png) [@ysumit](https://discuss.elastic.co/u/ysumit)\
**Post date:** [May 4, 2018, 9:07am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/7 "2018-05-04T09:07:36Z")

</div>

Thanks for the update.  
Any issues in the current beta version which have been cited?  
What would be the time frame for documentation availability?

We are trying to push our solution with Logstash as central collector. I hope you understand my urgency.

Regards  
Sumit

---

<div class="post-metadata">

**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\
**Post date:** [May 4, 2018, 9:37am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/8 "2018-05-04T09:37:48Z")

</div>

My understanding is that the timeline is a matter of weeks; you're welcome to provide input in the repository I linked though, to make sure we capture your use-case.

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [May 4, 2018, 10:11am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/9 "2018-05-04T10:11:00Z")

</div>

I took a look at this new filter...

To be clear there is a difference between receiving SNMP traps, and polling device using SNMP.

The OP was asking about traps. The only way to do this in Logstash is using `logstash-filter-snmptrap`.

The thing being worked on is an SNMP poller. This is a big gap in the open-source landscape. Yes there are things like collectd and telegraf, but they all suffer from the same inefficient polling methods, which make them mostly useless for anything beyond a small environment and small devices. Looking at the initial commits, this plugin is headed down that same road.

Building an SNMP poller that can truly poll large numbers of enterprise/carrier class devices is a challenge that only a few solutions do well. So I guess the question is, what is the target user for this feature?

---

<div class="post-metadata">

**Author:** ![ysumit](https://avatars.discourse-cdn.com/v4/letter/y/4da419/32.png) [@ysumit](https://discuss.elastic.co/u/ysumit)\
**Post date:** [May 4, 2018, 10:27am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/10 "2018-05-04T10:27:16Z")

</div>

Thanks

---

<div class="post-metadata">

**Author:** ![stevehou](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@stevehou](https://discuss.elastic.co/u/stevehou)\
**Post date:** [May 31, 2018, 5:48am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/11 "2018-05-31T05:48:57Z")

</div>

Hi Yaauie,

I would like hear from you about SNMP trap issue. We have Cisco switch here can send SNMP trap to SNMPTrap input Plugin. But other network device such as HuaWei can not. Where can we setup custom OID information on the Input Plugin?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 28, 2018, 5:49am UTC](https://discuss.elastic.co/t/snmp-trap-integration/130220/12 "2018-06-28T05:49:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
