# Snmptrap plugin is not decoding a specific field and rest of them are decoded

**URL:** https://discuss.elastic.co/t/snmptrap-plugin-is-not-decoding-a-specific-field-and-rest-of-them-are-decoded/111096
**Category:** Logstash
**Created:** [December 11, 2017, 1:19pm UTC](https://discuss.elastic.co/t/snmptrap-plugin-is-not-decoding-a-specific-field-and-rest-of-them-are-decoded/111096 "2017-12-11T13:19:36Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![George\_Cherian](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/george_cherian/32/25879_2.png) [@George\_Cherian](https://discuss.elastic.co/u/George_Cherian)
#### Post date: [December 11, 2017, 1:19pm UTC](https://discuss.elastic.co/t/snmptrap-plugin-is-not-decoding-a-specific-field-and-rest-of-them-are-decoded/111096/1 "2017-12-11T13:19:36Z")

</div>

I am using snmp plugin in logstash for getting snmp trap alarms.

The plugin is not decoding the trap name but the field is getting decoded as shown below:

```
{
              "SNMPv2-MIB::snmpTrapOID.0" => "BroadworksFault::systemFaults.8901",
 }

```

But while using the head command on the MIB file I can find it decoded correctly as shown below:

ubuntu@prod-platform:/usr/share/logstash/vendor/bundle/jruby/1.9/gems/snmp-1.2.0/data/ruby/snmp/mibs$ head BW-ExecutionDatalessFault.yaml  
---  
systemFaults: '0.1'  
bwPMExecutionDatalessServerLaunched: 0.1. **8901**  
bwPMExecutionDatalessServerShutDown: 0.1.8902  
bwPMExecutionDatalessServerRestarted: 0.1.8903  
bwPMExecutionDatalessServerDeath: 0.1.8904  
bwDXSSipAuthenticationFailure: 0.1.8905  
bwDXSAclViolation: 0.1.8906  
bwDXSIMSRetrieveMessageError: 0.1.8907  
bwDXSIMSRetrieveMailBoxInfoError: 0.1.8908

8901 is not getting decoded to "bwPMExecutionDatalessServerLaunched" as shown in the output.

Could any one please help me on this.

Thanks  
George

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 8, 2018, 1:19pm UTC](https://discuss.elastic.co/t/snmptrap-plugin-is-not-decoding-a-specific-field-and-rest-of-them-are-decoded/111096/2 "2018-01-08T13:19:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
