SNMP traps - McAfee ePO

billy_strath · Post by **billy_strath** » Tue Mar 20, 2018 9:34 am

I saw the previous post about SNMP for ilo, which directed us to https://www.elastic.co/guide/en/logstas ... ptrap.html
I'm looking to get some traps our from McAfee ePO. Things seems a bit more complicated, with protocols and passphrases. Anyone know how to configure to send to LogServer?

Post by **cdienger** » Tue Mar 20, 2018 4:50 pm

Do you have an option to use snmpv1 or 2? Currently v3 isn't an option for logstash:

https://github.com/logstash-plugins/log ... /issues/10

billy_strath · Post by **billy_strath** » Tue Mar 27, 2018 3:52 am

yes there is a v2 option - so that only requires the public string then does it?

scottwilkerson · Post by **scottwilkerson** » Tue Mar 27, 2018 8:17 am

billy_strath wrote:yes there is a v2 option - so that only requires the public string then does it?

Yes, v2 would only require the community string

Post by **tacolover101** » Thu Mar 29, 2018 10:56 am

if you wanted to use SNMPv3.....

you could still absorb the SNMP traps though by using snmptrapd, configure it to listen and setup a SNMPv3 user / engine, and then have logstash ingest the local file.

a little bit more configuration, but it'll work.

scottwilkerson · Post by **scottwilkerson** » Thu Mar 29, 2018 11:47 am

Thanks @tacolover101

Nagios Support Forum

SNMP traps - McAfee ePO

SNMP traps - McAfee ePO

Re: SNMP traps - McAfee ePO

Re: SNMP traps - McAfee ePO

Re: SNMP traps - McAfee ePO

Re: SNMP traps - McAfee ePO

Re: SNMP traps - McAfee ePO