I do not write English very well
but I need help, since I can not find more help with the “SNMP Trapd” plugins of Graylog.
I need to be able to bring me the log information of several ciso catalyst switches from several agencies, part of the project to centralize the log that I have. The issue is that I have an SNMP community which responds to all the switches and router that I manage, I found encontrig graylog, but now I’m sorry to see that there is no more documentation of the snmp plugins.
I do not know what to do anymore because I promised that graylog would be the open source solution for this project.
My account was blocked, I can not write for the post, I just have to write here. How can I answer the questions if I do not even explain why I was blocked and could not have any answer.
if you like to get fast responses and not volunteer help you might want to buy professional support by Graylog ( https://www.graylog.org/contact-sales ). Just that you have it in mind - this is the community forum where all help is given on a volunteer base.
The plugin allows to create a SNMP TRAP that can be used as a target for events from other devices. It does not poll the information. You would need to configure your devices with the created trap as target for messages.
Thank you I will consider it if I can do what the client requested with the Graylog solution, I apologize if I seemed hurried.
I have searched in many parts for information about the plugins, and the truth is that I have not obtained the desired results. The plugins as I understand “SNMP TRAP” will not be useful then to process the information I get on my server through snmptrap.
So, how can I use graylog to be able to capture through snmp the necessary information corresponding to the logs that the routers can send by snmp to my snmp, and that the server where I have installed graylog can I graph or see that information in the graylog dashboards?
The client for whom I work used the “Kiwi Syslog” solution, as I have worked with Graylog before at the server level. The results of this solution are great for the client, but I do not know how graylog can centralize the Cisco cisco’s logs using snmp.
I’m grateful with your timely response and once again I apologize it seemed rushed in the answer.
Graylog is a very verastil tool, powerful and well seen by me as a server administrator to use it in small and medium enterprises.
personal I have never used Graylog to GET SNMP Informations active - like with SMNP Walk - only with the trap where devices send their messages too. Maybe a tool like LibreNMS can help you with that?
I think that in this community are more people that can help you with that topic. I’d never worked as Network Admin, so that is not my area.
I found an unconventional way, but it has given me lights to capture the SNMPTRAP mesnages. What I did was to activate snmptrapd as a service, execute a script inside the server that communicates with the SNMP community, in the service options of snmptrapd /etc/sysconfig / snmptrapd OPTIONS = "- n -Lsd -p /var/run/snmptrapd.pid "do the capture of the same /var/log/messages and configure the rsyslog service to be captured locally by Graylog.
Then it is best to create the custom path of /var/log/snmptrapd, improve the values of the capture script and filter via command and then with Graylog to make the graphs.
With certain limitations, but I could have visually and with graphics the log captured by snmptrapd. Where I should improve is in the query queries of greylog to filter the data required by the client.
I risked giving the client better detail than I required and it did not turn out so badly.
Thanks for your valuable support. My respect and admiration for Graylog, I hope this solution evolves much better
