SNMP Trap Monitoring with Logstash

[swasheck]

Currently running ELK 6.1.1 (Docker sebp/elk) and trying to get SNMP trap monitoring functional. My current config is as follows:

input { 
    snmptrap { 
        type => "snmptrap" 
        host => "0.0.0.0" 
        port => 1062         
    }
} 
output { 
    elasticsearch { 
        hosts => ["127.0.0.1:9200"] 
    } 
    stdout { codec => rubydebug } 
}

I do see the input is functioning

[2018-01-09T17:39:45,442][INFO ][logstash.inputs.snmptrap ] It's a Trap! {:Port=>1062, :Community=>["public"], :Host=>"0.0.0.0"}

However, all of my attempts to get a response from within the container end up with timeouts/no reponse

snmpwalk -v2c -c public localhost:1062

Timeout: No Response from localhost:1062

snmpwalk -v2c -c public 127.0.0.1:1062

Timeout: No Response from 127.0.0.1:1062

What am I missing?

[murlin99 (Bryan Vest)]

You will not get an snmpwalk response from an snmptrap input. To test it you need to send a test trap using the snmptrap command.