All Apps and Add-ons

Ciphering services not available with snmp_ta?

cdstealer
Contributor

Hi,
I seem to be having issues getting SNMP inputs to work on a new install of Splunk. I already have this exact setup working in other environments, so this has stumped me.

Error in splunkd.log
message from "python /opt/splunk/etc/apps/snmp_ta/bin/snmp.py" Ciphering services not available snmp_stanza:snmp://cisco:mds9000:test

inputs.conf
[snmp://cisco:mds9000:test]
destination = xxx.xxx.xxx.xxx
do_bulk_get = 1
do_get_subtree = 1
index = snmp_test
ipv6 = 0
object_names = 1.3.6.1.4.1.9.9.109.1.1.1.1.7,1.3.6.1.4.1.9.9.109.1.1.1.1.8,1.3.6.1.4.1.9.9.109.1.1.1.1.12,1.3.6.1.4.1.9.9.109.1.1.1.1.13
snmp_mode = attributes
snmp_version = 3
sourcetype = snmp_test1
split_bulk_output = 1
trap_rdns = 0
v3_authKey = ********
v3_authProtocol = usmHMACSHAAuthProtocol
v3_privProtocol = usmAesCfb128Protocol
v3_securityName = ********
v3_privKey = ********
mib_names = CISCO-PROCESS-MIB
disabled = 0
snmpinterval = 300
interval = 300

As the MIBS are already python compiled in the other envs, I've just copied them over. I'm probably missing something blindingly obvious. But if anyone has any ideas, I would be very grateful.

I've also tried an snmpwalk from the collector server and that seems to run ok.

snmpwalk -v3 -l authPriv -u splunk -a SHA -A "********" -x AES -X "********" xxx.xxx.xxx.xxx

SNMPv2-MIB::sysDescr.0 = STRING: Cisco NX-OS(tm) m9100, Software (m9100-s5ek9-mz), Version 6.2(19), RELEASE SOFTWARE >
Copyright (c) 2002-2013 by Cisco Systems, Inc. Compiled 1/30/2017 23:00:00
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.12.3.1.3.1491
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (2288470610) 264 days, 20:51:46.10
SNMPv2-MIB::sysContact.0 = STRING: aname
SNMPv2-MIB::sysName.0 = STRING: aname

Labels (1)
1 Solution

cdstealer
Contributor

OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!

View solution in original post

0 Karma

johnnytam29
New Member

Mind to tell how to install?

0 Karma

johnnytam29
New Member

i found solution.

You need to pip install pycryptodome package, and copy out the Cipher folder from the package to /opt/splunk/etc/apps/snmp_ta/bin/Cipher. Initially my snmp_ta is using python version 2, after pasting to bin, you need to change to python version 3 to make it work.

Version:

snmp_ta=1.6.5

splunk =9.0.2

Hope it helps someone who having the same issue.

0 Karma

cdstealer
Contributor

OK.. fixed it. I hadn't installed the pycryto package into /opt/splunk/etc/apps/snmp-ta/bin. DOH!

0 Karma

kristine_pamati
Engager

Hi! so how did you install?

0 Karma

ygdrassilp
Explorer

also wanna know how did you install it

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...