Getting Data In

how to line break snmp data

ahmedhassanean
Explorer

Dears,

i have configured scripted input that poll snmp of network devices using snmpwalk command but problem that walk come back to me as one events with 3000 line i would like to know how to break each line as event . please find below sample of output

IF-MIB::ifIndex.80 = 80
IF-MIB::ifIndex.736 = 736
IF-MIB::ifIndex.752 = 752
IF-MIB::ifIndex.768 = 768
IF-MIB::ifIndex.784 = 784
IF-MIB::ifIndex.800 = 800
IF-MIB::ifIndex.816 = 816
IF-MIB::ifIndex.832 = 832
IF-MIB::ifIndex.848 = 848
IF-MIB::ifIndex.864 = 864
IF-MIB::ifIndex.880 = 880
IF-MIB::ifIndex.928 = 928
IF-MIB::ifIndex.944 = 944
IF-MIB::ifIndex.960 = 960

0 Karma

DMohn
Motivator

If the events in your input are line separated, you should use the setting SHOULD_LINEMERGE = false in your props.conf (which normally defaults to true. This will split your input into one event per line.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...