Comments (3)
DanSheps
commented on July 17, 2024
1
Thanks @edmocosta that looks like the exact same issue. I did capture some data from the output and what you get is something like this
{
"index": "<MAC Address #1 in decimal format>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.38": <Wireless Admin Status>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.105": "<RF Tag>"
},
{
"index": "<MAC Address #2 in decimal format>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.38": <Wireless Admin Status>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.105": "<RF Tag>"
},
{
"index": "<MAC Address #3 in decimal format>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.38": <Wireless Admin Status>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.105": "<RF Tag>"
},
{
"index": "<MAC Address #4 in decimal format>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.38": <Wireless Admin Status>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.105": "<RF Tag>"
},
{
"1.3.6.1.4.1.14179.2.2.1.1.1.17": "<SERIALNUMBER>",
"index": "<MAC Address #1 in decimal format>",
"1.3.6.1.4.1.14179.2.2.1.1.1.1": "<MAC ADDRESS>",
"1.3.6.1.4.1.14179.2.2.1.1.1.3": "<AP Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.33": "<Ethernet MAC Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.6": <Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.8": "<Software Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.9": "<Boot Loader Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.4": "<Location Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.2": <RADIO SLOTS>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.106": "<Policy Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.16": "<Model>",
"1.3.6.1.4.1.14179.2.2.1.1.1.28": "<Static IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.37": <Admin Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.26": "<Subnet Mask>",
"1.3.6.1.4.1.14179.2.2.1.1.1.19": "<IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.13": <Port Number>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.104": "<Site Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.22": <AP Type>,
"1.3.6.1.4.1.14179.2.2.1.1.1.27": "<IP Gateway>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.32": "<Location Name>"
},
{
"1.3.6.1.4.1.14179.2.2.1.1.1.17": "<SERIALNUMBER>",
"index": "<MAC Address #2 in decimal format>",
"1.3.6.1.4.1.14179.2.2.1.1.1.1": "<MAC ADDRESS>",
"1.3.6.1.4.1.14179.2.2.1.1.1.3": "<AP Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.33": "<Ethernet MAC Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.6": <Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.8": "<Software Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.9": "<Boot Loader Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.4": "<Location Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.2": <RADIO SLOTS>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.106": "<Policy Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.16": "<Model>",
"1.3.6.1.4.1.14179.2.2.1.1.1.28": "<Static IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.37": <Admin Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.26": "<Subnet Mask>",
"1.3.6.1.4.1.14179.2.2.1.1.1.19": "<IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.13": <Port Number>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.104": "<Site Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.22": <AP Type>,
"1.3.6.1.4.1.14179.2.2.1.1.1.27": "<IP Gateway>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.32": "<Location Name>"
},
{
"1.3.6.1.4.1.14179.2.2.1.1.1.17": "<SERIALNUMBER>",
"index": "<MAC Address #3 in decimal format>",
"1.3.6.1.4.1.14179.2.2.1.1.1.1": "<MAC ADDRESS>",
"1.3.6.1.4.1.14179.2.2.1.1.1.3": "<AP Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.33": "<Ethernet MAC Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.6": <Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.8": "<Software Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.9": "<Boot Loader Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.4": "<Location Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.2": <RADIO SLOTS>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.106": "<Policy Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.16": "<Model>",
"1.3.6.1.4.1.14179.2.2.1.1.1.28": "<Static IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.37": <Admin Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.26": "<Subnet Mask>",
"1.3.6.1.4.1.14179.2.2.1.1.1.19": "<IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.13": <Port Number>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.104": "<Site Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.22": <AP Type>,
"1.3.6.1.4.1.14179.2.2.1.1.1.27": "<IP Gateway>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.32": "<Location Name>"
},
{
"1.3.6.1.4.1.14179.2.2.1.1.1.17": "<SERIALNUMBER>",
"index": "<MAC Address #4 in decimal format>",
"1.3.6.1.4.1.14179.2.2.1.1.1.1": "<MAC ADDRESS>",
"1.3.6.1.4.1.14179.2.2.1.1.1.3": "<AP Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.33": "<Ethernet MAC Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.6": <Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.8": "<Software Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.9": "<Boot Loader Version>",
"1.3.6.1.4.1.14179.2.2.1.1.1.4": "<Location Name>",
"1.3.6.1.4.1.14179.2.2.1.1.1.2": <RADIO SLOTS>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.106": "<Policy Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.16": "<Model>",
"1.3.6.1.4.1.14179.2.2.1.1.1.28": "<Static IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.37": <Admin Status>,
"1.3.6.1.4.1.14179.2.2.1.1.1.26": "<Subnet Mask>",
"1.3.6.1.4.1.14179.2.2.1.1.1.19": "<IP Address>",
"1.3.6.1.4.1.14179.2.2.1.1.1.13": <Port Number>,
"1.3.6.1.4.1.9.9.513.1.1.1.1.104": "<Site Tag>",
"1.3.6.1.4.1.14179.2.2.1.1.1.22": <AP Type>,
"1.3.6.1.4.1.14179.2.2.1.1.1.27": "<IP Gateway>",
"1.3.6.1.4.1.9.9.513.1.1.1.1.32": "<Location Name>"
}
}
And my appologies I was unaware there was a separate repo for plugins for logstash, which likely explains why I was unable to find any issues here.
You could likely close this since I suspect the bug linked in the plugin repo is the same bug.
from logstash.
edmocosta
commented on July 17, 2024
Hi @DanSheps!
Thank you for reporting! I'm not sure if I fully understood this issue, could you please provide more context on the expected behaviour and the used pipeline's split config?
The SNMP table is mapped as an array by the snmp plugin, so If you're splitting the event by the table's name split { field => "aps" }, the split filter will generated one event per received OID, without including the other array's elements (OIDs) on it.
For example, the following snmp event would be split into two events, one per per "aps" item:
"aps" => [
[0] {
"index" => "1.2.1",
"1.3.6.1.2.1.1.9.1.2.1" => "1.3.6.1.6.3.11.2.3.1.1"
},
[1] {
"index" => "1.2.2",
"1.3.6.1.2.1.1.9.1.2.2" => "1.3.6.1.6.3.15.2.1.1"
}
]Nevertheless, we've an open issue with the "index" value that may be related to this case. My suggestion for now is to try it out with the new SNMP integration plugin, which uses the latest underline SNMP libraries and maybe already fixed the problem.
Thank you!
from logstash.
edmocosta
commented on July 17, 2024
Duplicate of logstash-plugins/logstash-integration-snmp#30
from logstash.
Related Issues (20)
- Document how to set `https` proxy for Azure Event Hub input plugin
- Document how to configure logging for libraries or part of code that leverage Java Util Logging inside Logstash
- 8.14.0 environment variables stopped working HOT 6
- 8.14.0 xpack.management.pipeline.id * no longer working HOT 1
- Failed config reloads in Logstash causes resources leaks HOT 6
- Docs: Logstash 8.14.1 release docs
- Plugin manager does not remove integration plugin overlaps when installing from offline packs
- [BUG] starting database-managed geoip filter after db refresh causes pipeline crash HOT 1
- Document SSL/TLS key and certificate formats accepted by plugins
- Update Logstash 7 ironbank UBI version
- Doc: Logstash 8.14.2 release docs
- [Doc] Flow stats should not have worker_utilization
- Doc: Update plugin headers to reflect Elastic styles
- Doc: LS Versioned Plugin Reference does not display (or hide) conditional install instructions for plugins
- ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 80 while PipelineAction::Create
- [CI] benchmark pipeline fails to pull the right version of image
- Doc: Logstash 8.14.3 release docs
- Doc: Update Versioned Plugin Reference to use short titles for SNMP 4.0.0
- Pipeline size limits and how to work around them
- Using deprecated settings does not result in deprecation log
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from logstash.