# Snmptrap

**URL:** https://discuss.elastic.co/t/snmptrap/233444
**Category:** Logstash
**Created:** [May 20, 2020, 3:12am UTC](https://discuss.elastic.co/t/snmptrap/233444 "2020-05-20T03:12:11Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![PraveenKT](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/praveenkt/32/35483_2.png) [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)
#### Post date: [May 20, 2020, 3:12am UTC](https://discuss.elastic.co/t/snmptrap/233444/1 "2020-05-20T03:12:12Z")

</div>

Hi Elastic team.  
Withe below config, i am successuflly able to start logstash and snmptrap on 1062. WHen i tried to covert Cisco mib file to yaml. i am getting below error. And SNMP TRAP output in Kibana discover showed as below.  
How do i make it work SNMP traps and SNMP of logstash input? WHile converting mib to .dic also throwing errors.

++++++++++++++++++++++++++++++  
input {  
snmptrap {  
port =\> 1062  
community =\> 'HotStar'  
type =\> 'snmptrap'  
tags =\> ["INHY", "SNMPTRAPS"]  
yamlmibdir =\> "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/snmp-1.3.2/data/ruby/snmp/mibs"  
}  
beats {  
port =\> 5044  
}  
}  
filter {  
if "METRIC" in [tags] {  
mutate { add\_field =\> { "[@metadata][target\_index]" =\> "metric-%{+YYYY.MM.dd}" } }  
} else if "FILE" in [tags] {  
mutate { add\_field =\> { "[@metadata][target\_index]" =\> "file-%{+YYYY.MM.dd}" } }  
} else if "TRAPS" in [tags] {  
mutate { add\_field =\> { "[@metadata][target\_index]" =\> "net-%{+YYYY.MM.dd}" }}  
mutate {  
rename =\> ["host", "nwhost"]  
convert =\> {"nwhost" =\> "string"}}  
} else {  
mutate { add\_field =\> { "[@metadata][target\_index]" =\> "unknown-%{+YYYY.MM.dd}" } }  
}  
}  
output {  
elasticsearch {  
hosts =\> ["10.252.10.76:9200"]  
manage\_template =\> "false"  
index =\> "%{[@metadata][target\_index]}"  
}  
}

++++++++++++++++++++++++++++  
root@USLA-PAPP-ELK02 conf.d]# cd /usr/share/logstash/vendor/bundle/jruby/2.5.0/gem s/snmp-1.3.2/  
/usr/share/logstash/bin/ruby import.rb data/ruby/snmp/mibs/

data/ruby/snmp/mibs//CISCO-IP-IF-MIB.mib  
smidump: module `data/ruby/snmp/mibs//CISCO-IP-IF-MIB.mib' contains errors, expect flawed output  
\*\*\* No nodes defined in: data/ruby/snmp/mibs//CISCO-IP-IF-MIB.mib \*  
++++++++++++++++++++++++++++++++++++++++++++++++++++  
Below is the message in kibana discover:  
#\<SNMP::SNMPv2\_Trap:0x1997a02d @request\_id=863, @error\_index=0, @error\_status=0, @source\_ip="10.252.10.1", @varbind\_list=[#\<SNMP::VarBind:0x6a92c473 @name=[1.3.6.1.2.1.1.3.0], @value=#\<SNMP::TimeTicks:0x4d703d2 @value=678447862\>\>, #\<SNMP::VarBind:0x20654dad @name=[1.3.6.1.6.3.1.1.4.1.0], @value=[1.3.6.1.4.1.9.9.43.2.0.1]\>, #\<SNMP::VarBind:0x3d65b16 @name=[1.3.6.1.4.1.9.9.43.1.1.6.1.3.48], @value=#\<SNMP::Integer:0x7f9bb643 @value=1\>\>, #\<SNMP::VarBind:0x436ef3f1 @name=[1.3.6.1.4.1.9.9.43.1.1.6.1.4.48], @value=#\<SNMP::Integer:0x49ecc614 @value=3\>\>, #\<SNMP::VarBind:0x78532ad4 @name=[1.3.6.1.4.1.9.9.43.1.1.6.1.5.48], @value=#\<SNMP::Integer:0x5a58b233 @value=4\>\>]\>

+++++++++++++++++++++++++++++++

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 17, 2020, 3:12am UTC](https://discuss.elastic.co/t/snmptrap/233444/2 "2020-06-17T03:12:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.