I am trying to collect the traps from a UPS device. When I installed my app on my development instance which is a standalone environment, I was able to collect the data properly.
I then tried to ingest the data to our production environment which is a clustered environment (multiple indexers, search heads and heavy forwarders). I have installed the SNMP TA on one of the Heavy forwarder and all the search heads [SNMP TA is not present on indexers]. From UPS, I am sending the traps to a heavy forwarder and heavy forwrarder is in-turn ingesting it to our indexers. Ports are opened. I am able to receive the data but the data is not being parse properly. I am getting some garbage symbols and values. I have placed a custom MIB for APC UPS in the mibs directory of the app on the Heavy forwarder.
I saw that few people have said that by changing the trap_host in the inputs.conf stanza to DNS or IP has resolved their issue. I tried that as well but still has no luck.
Could you please let me know if I have missed any steps here?
... View more