Snmpcoll unable to find device

jvusos · October 3, 2024, 5:45am

Hi
I have a problem with snmp standard license.
i have this message on snmpcoll.log

’
2024-10-03T16:03:34.683+1100 info snmp.controller.opmanager opmanager/opmanager.go:95 initiating device polling - authentication/discovery/polling will be started {“device”: {“ip”: “192.168.90.1”, “port”: 161}}
2024-10-03T16:03:34.683+1100 info snmpcoll.snmp.poller poller/poller.go:61 running
2024-10-03T16:03:34.684+1100 error snmp.controller controller/controller.go:302 unable to find device details {“ip”: “192.168.90.1”, “port”: 161}
’
devices/device.yml and defaults/device.yml seem correctly configured.

devices/device.yml

mikrotik_pppoe:
ip: 192.168.90.1
port: 161

defaults/device.yml

default:
port: 161
poll_interval: 60
timeout: 3000
retries: 2
exponential_timeout: false
version: 2c
communities:
- public
device_groups:
- mikrotik_routeros

Do I miss somewhere configuration?
Thanks for any help.

Jack

rob · October 3, 2024, 11:43am

Can you please repost your configuration using a code block? YAML is sensitive to incorrect/inconsistent indentation and there is no way to know if your configuration is correct unless you put it in a code block.

jvusos · October 4, 2024, 1:03am

Here is the configuration.
Thanks for your help

/etc/elastiflow/snmp/devices/device.yml

Blockquote
mikrotik_pppoe:
ip: 192.168.90.1
port: 161

Blockquote

/etc/elastiflow/snmp/defaults/device.yml

Blockquote
default:
port: 161
poll_interval: 60
timeout: 3000
retries: 2
exponential_timeout: false
version: 2c
communities:
- public
device_groups:
- mikrotik_routeros

Blockquote

jvusos · October 4, 2024, 1:17am

fyi sceenschot of both files.

hope this help.

rob · October 4, 2024, 10:27am

First, a code block is either the highlighted option…

Looking at the screenshot it looks like you have leading spaces on each line of defaults/device.yml

jvusos · October 4, 2024, 10:19pm

That is right, I have removed space as expected on defaults/device.yml, but still have same message.

/etc/elastiflow/snmp/devices/device.yml

mikrotik_pppoe:
  ip: 192.168.90.1
  port: 161

/etc/elastiflow/snmp/defaults/device.yml

default:
  port: 161
  poll_interval: 60
  timeout: 3000
  retries: 2
  exponential_timeout: false
  version: 2c
  communities:
    - public
  device_groups:
    - mikrotik_routeros

Here is full starting log

2024-10-05T09:09:05.511+1100    info    snmpcoll.license[default]       envconf/logger.go:49    EF_ACCOUNT_ID=63b6221b5fc24534b43b044a
2024-10-05T09:09:05.516+1100    info    snmpcoll.license[default]       envconf/logger.go:49    EF_SNMP_LICENSE_KEY=****************************************************************************************************************************************************************************************************************************************************************************************************************************************************
2024-10-05T09:09:05.516+1100    info    snmpcoll.license[default]       envconf/logger.go:49    EF_SNMP_LICENSED_CORES=0
2024-10-05T09:09:05.516+1100    info    snmpcoll.license[default]       envconf/logger.go:49    EF_SNMP_LICENSED_UNITS=1
2024-10-05T09:09:05.516+1100    info    snmpcoll.license[default]       envconf/logger.go:49    EF_LICENSE_ACCEPTED=true
2024-10-05T09:09:05.516+1100    info    snmpcoll        lic/snmp.go:39  By running this software, you and/or the organization using the software agree and are bound to the terms of an ElastiFlow Inc. End-User License Agreement (EULA). For the Community (no license key), Basic and Trial tiers, the applicable license is the ElastiFlow Community EULA, which may be found at: https://www.elastiflow.com/community-license. For Standard and Premium Commercial tiers the applicable license is the ElastiFlow Standard EULA, or other terms agreed in writing with ElastiFlow Inc. The ElastiFlow Standard EULA may be found at: https://www.elastiflow.com/commercial-license.
2024-10-05T09:09:05.517+1100    info    snmpcoll        snmpcoll/main.go:67     version {"version": "7.3.0"}
2024-10-05T09:09:05.518+1100    info    snmpcoll        lic/lic.go:49   license information     {"expiration": "2024-10-27T11:00:00.000+1100", "level": 8, "units": 16}
2024-10-05T09:09:05.520+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_ENABLE=true
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_POLLER_WORKER_POOL_SIZE=16
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEFAULTS_DIRECTORY_PATH=/etc/elastiflow/snmp/defaults
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_DIRECTORY_PATH=/etc/elastiflow/snmp/devices
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_GROUP_DEFINITIONS_DIRECTORY_PATH=/etc/elastiflow/snmp/device_groups
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_OBJECT_GROUP_DEFINITIONS_DIRECTORY_PATH=/etc/elastiflow/snmp/object_groups
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_OBJECT_DEFINITIONS_DIRECTORY_PATH=/etc/elastiflow/snmp/objects
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_PERSIST_ENABLE=true
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_PERSIST_DIRECTORY_PATH=/usr/share/elastiflow/snmpcoll
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_POLLER_OP_STREAM_MAX_SIZE=65536
2024-10-05T09:09:05.521+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_OP_STREAMS_SIZE=1024
2024-10-05T09:09:05.522+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_POLLER_ERROR_HANDLING=partial
2024-10-05T09:09:05.522+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_ENABLE=false
2024-10-05T09:09:05.522+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_CREATE=false
2024-10-05T09:09:05.522+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_TYPE=sops
2024-10-05T09:09:05.522+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_PASSWORD=
2024-10-05T09:09:05.523+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_PRIVATE_KEY_FILE_PATH=/etc/elastiflow/snmp/.age/key.age
2024-10-05T09:09:05.523+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_PUBLIC_KEY_FILE_PATH=/etc/elastiflow/snmp/.age/public-age-keys.txt
2024-10-05T09:09:05.523+1100    info    snmpcoll.snmp[default]  envconf/logger.go:49    EF_INPUT_SNMP_DEVICE_DEFINITIONS_SECURE_STORE_PUBLIC_KEY=
2024-10-05T09:09:05.525+1100    info    snmpdata/conf.go:396    Field to Drop:
2024-10-05T09:09:05.526+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_TRANSLATE_KEEP_IDS=default
2024-10-05T09:09:05.526+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_TTL=7200
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_METADATA_ENABLE=true
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_METADATA_USERDEF_PATH=/etc/elastiflow/metadata/ipaddrs.yml
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_METADATA_REFRESH_RATE=15
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_ENABLE=true
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_NAMESERVER_IP=1.1.1.1
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_NAMESERVER_TIMEOUT=3000
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_RESOLVE_PRIVATE=true
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_RESOLVE_PUBLIC=true
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_USERDEF_PATH=/etc/elastiflow/hostname/user_defined.yml
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_USERDEF_REFRESH_RATE=15
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_INCLEXCL_PATH=/etc/elastiflow/hostname/incl_excl.yml
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_DNS_INCLEXCL_REFRESH_RATE=15
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_ASN_ENABLE=false
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_ASN_PATH=/etc/elastiflow/maxmind/GeoLite2-ASN.mmdb
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_ENABLE=false
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_PATH=/etc/elastiflow/maxmind/GeoLite2-City.mmdb
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_VALUES=city,country,country_code,location,timezone
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_LANG=en
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_INCLEXCL_PATH=
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_IPADDR_MAXMIND_GEOIP_INCLEXCL_REFRESH_RATE=15
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_TTL=7200
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_METADATA_ENABLE=false
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_METADATA_USERDEF_PATH=
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_METADATA_REFRESH_RATE=15
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_ENABLE=false
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_PORT=161
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_VERSION=2
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_COMMUNITIES=public
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_TIMEOUT=2
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_RETRIES=1
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHORITATIVE_ENGINE_ID=
2024-10-05T09:09:05.527+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHORITATIVE_ENGINE_BOOTS=0
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHORITATIVE_ENGINE_TIME=0
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_USERNAME=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHENTICATION_PARAMETERS=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_PRIVACY_PARAMETERS=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHENTICATION_PROTOCOL=noauth
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_PRIVACY_PROTOCOL=nopriv
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_AUTHENTICATION_PASSPHRASE=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_PRIVACY_PASSPHRASE=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_SECRET_KEY=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_NETIF_SNMP_V3_PRIVACY_KEY=
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_ENRICH_ASN_PREF=lookup
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_SNMP_ENUM_ENABLE=true
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_SNMP_ENUM_DEFINITIONS_DIRECTORY_PATH=/etc/elastiflow/snmp/enums
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_SNMP_ENTERPRISE_FILE=/etc/elastiflow/snmp/enterprise.yml
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_SNMP_RULES_DIRECTORY_PATH=/etc/elastiflow/snmp/rules/
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_SNMP_POOL_SIZE=1
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_DURATION_PRECISION=ms
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_TIMESTAMP_PRECISION=ms
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_PERCENT_NORM=100
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_KEEP_CPU_TICKS=true
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_POOL_SIZE=4
2024-10-05T09:09:05.528+1100    info    snmpcoll.processor[default]     envconf/logger.go:49    EF_PROCESSOR_DROP_FIELDS=
2024-10-05T09:09:05.530+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/support-bundle"}
2024-10-05T09:09:05.533+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/metrics"}
2024-10-05T09:09:05.533+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/readyz"}
2024-10-05T09:09:05.533+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/livez"}
2024-10-05T09:09:05.533+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/api/v1/snmp/apply-definitions"}
2024-10-05T09:09:05.533+1100    info    snmpcoll.httpserver     httpserver/httpserver.go:28     endpoint exposed        {"url": "http://0.0.0.0:8080/api/v1/snmp/rediscover-device"}
2024-10-05T09:09:05.538+1100    info    snmpcoll.snmp   snmp/instance_registration.go:73        instance created
2024-10-05T09:09:05.744+1100    info    cached/snmpenum.go:252  SNMP OID enumerations loaded successfully: 22022 total OIDs
2024-10-05T09:09:05.779+1100    info    ipaddr_enricher.ip_metadata_enricher    udm/udm.go:139  started
2024-10-05T09:09:05.783+1100    info    ipaddr_enricher.hostname_enricher.ip/cider_to_values    cidr2value/cidr2value.go:141    started for file        {"file": "/etc/elastiflow/hostname/user_defined.yml"}
2024-10-05T09:09:05.788+1100    info    ipaddr_enricher.hostname_enricher       hostname/hostname.go:73 started
2024-10-05T09:09:05.795+1100    info    ipaddr_enricher.netintel_threats        netintel/enricher.go:92 netintel not enabled
2024-10-05T09:09:05.797+1100    info    ipaddr_enricher.memstore        enrichipaddr/memstore.go:39     listening for ips to delete
2024-10-05T09:09:05.797+1100    info    ipaddr_enricher.memstore        enrichipaddr/memstore.go:50     store listening for entries to store
2024-10-05T09:09:05.803+1100    info    ipaddr_enricher.custodian       enrichipaddr/custodian.go:63    listening for entries to store
2024-10-05T09:09:05.804+1100    info    ipaddr_enricher.custodian       enrichipaddr/custodian.go:52    listening for ips to delete
2024-10-05T09:09:05.804+1100    info    ipaddr_enricher.custodian       enrichipaddr/custodian.go:73    expiration checker is running
2024-10-05T09:09:05.805+1100    info    netif_enricher  enrichnetif/memstore.go:41      in-memory store listening for IPs to delete
2024-10-05T09:09:05.805+1100    info    netif_enricher.custodian        enrichnetif/custodian.go:55     listening for IPs to delete
2024-10-05T09:09:05.805+1100    info    netif_enricher  enrichnetif/memstore.go:52      in-memory store listening for entries to store
2024-10-05T09:09:05.807+1100    info    netif_enricher.custodian        enrichnetif/custodian.go:66     listening for entries to store
2024-10-05T09:09:05.807+1100    info    netif_enricher.custodian        enrichnetif/custodian.go:76     expiration checker is running
2024-10-05T09:09:05.809+1100    info    snmpcoll.metrics_provider       metrics/provider.go:120 gathering metrics
2024-10-05T09:09:05.809+1100    info    snmpcoll.processor      snmpprocessor/snmp.go:51        snmp record processor is running
2024-10-05T09:09:05.809+1100    info    snmpcoll.processor      snmpprocessor/snmp.go:51        snmp record processor is running
2024-10-05T09:09:05.809+1100    info    snmpcoll.processor      snmpprocessor/snmp.go:51        snmp record processor is running
2024-10-05T09:09:05.809+1100    info    snmpcoll.processor      snmpprocessor/snmp.go:51        snmp record processor is running
2024-10-05T09:09:05.809+1100    info    snmpcoll        liveness/liveness.go:26 liveness: running
2024-10-05T09:09:05.812+1100    info    snmpcoll.writer_pool    writer/writer.go:35     running
2024-10-05T09:09:05.888+1100    info    disk_persist/disk_persistor.go:111      successfully loaded definition store and device object schedule store from disk
2024-10-05T09:09:05.892+1100    info    snmpcoll.snmp.poller    poller/poller.go:61     running
2024-10-05T09:09:05.892+1100    info    snmp.controller controller/controller.go:179    device schedules loaded from disk, initiating device schedules
2024-10-05T09:09:05.895+1100    info    snmp.controller.opmanager       opmanager/opmanager.go:29       running
2024-10-05T09:09:05.894+1100    info    snmp.controller.scheduler       scheduler/scheduler.go:60       running
2024-10-05T09:09:05.895+1100    info    snmp.controller.opmanager       opmanager/opmanager.go:95       initiating device polling - authentication/discovery/polling will be started        {"device": {"ip": "192.168.90.1", "port": 161}}
2024-10-05T09:09:05.895+1100    error   snmp.controller controller/controller.go:302    unable to find device details   {"ip": "192.168.90.1", "port": 161}
github.com/elastiflow/flowcoll/pkg/inputs/snmp/controller.applyControlSignalDeviceAdd
        /tmp/collectors/pkg/inputs/snmp/controller/controller.go:302
github.com/elastiflow/flowcoll/pkg/inputs/snmp/controller.(*Controller).handleControlStream
        /tmp/collectors/pkg/inputs/snmp/controller/controller.go:280
github.com/elastiflow/flowcoll/pkg/inputs/snmp/controller.(*Controller).Run
        /tmp/collectors/pkg/inputs/snmp/controller/controller.go:185

jvusos · October 11, 2024, 3:59am

Anyone encounted same problem and fix it?

dxturner · October 11, 2024, 3:09pm

I don’t see any obvious reason from the information provided that would explain the error. It would probably be best to review the actual files. If you will zip up and send /etc/elastiflow/flowcoll.yml, /var/log/elastiflow/snmpcoll/snmpcoll.log, and everything in /etc/elastiflow/snmp and email them to dexter ‘at’ elastiflow.com I will review them as soon as I have time.

Thanks,
Dexter

dxturner · October 17, 2024, 10:16pm

Apologies for the slow reply. I actually ran into this exact same issue in my local lab system. In my case I had an incorrect port number in one of the devices. I changed the port and restarted the snmpcoll service but noticed in the logs that it was still trying to poll the wrong port number.

To correct the issue I had to delete the ‘gob’ files where object information is persisted. These files are located in /usr/share/elastiflow/snmpcoll. Please stop the snmpcoll, delete the “*.gob” files in this directory and restart. They should be recreated.

Please let me know if this helps.

Thanks,
Dexter

jvusos · October 18, 2024, 8:59am

Hi dexter

That’s great and correct now (no error).
BTW, i cannot see with tcpdump any poll from elastiflow on port 161.
elastiflow documentation is also lite.
can you tell me how i can display on kibana? or any additionnal configuration?

Thanks

Jack

dxturner · October 18, 2024, 11:51am

What is the tcpdump command you are running and where are you running it? On the snmpcoll host?

I see you have configured Elasticsearch/Kibana as output destinations in your flowcoll.yml, but I do not see any output configured in snmpcoll.yml so you will need to configure that to see data via Kibana. Also, you will need to import the SNMP telemetry dashboards if you have not done so.

Hope this helps.

Dexter

jvusos · October 18, 2024, 11:56pm

I have imported telemetry dashboard on kibana.
dashboard telemetry are now available but datas are still empty.
If I understand, snmpcoll process should poll router on port 161.
I have run linux tcpdum on console to check if any traffic on port 161 from elastiflow machine (where snmpcoll is running), but there is no traffic output from server to router.
perhaps i have miss configuration somewhere.

Thanks for your help.

Jack

jvusos · October 21, 2024, 2:28am

Hi again Dexter.

As the trial license will expire soon, i would like your help to solve my snmpcoll problem.
It will give me better review to decide if downgrade to basic (but restrictive license) , or to get full licence.
Thanks for your help.

Jack

dxturner · October 23, 2024, 1:46pm

So, from the console of the device you are polling you are running a tcpdump and not seeing any polls coming from the snmpcoll? It sounds like there is some issue with creating/generating the poll. Can you do an snmpwalk from the snmpcoll server to the device you are wanting to poll?

Anything in the snmpcoll.log to indicate a problem doing the poll?

jvusos · October 24, 2024, 1:36am

hi dexter

snmpwalk from elastiflow can poll correctly the device:

Blockquote
elea@elastiflow:~$ sudo snmpwalk -c public -v 2c 192.168.90.1 | more
iso.3.6.1.2.1.1.1.0 = STRING: “RouterOS C53UiG+5HPaxD2HPaxD”
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.14988.1
iso.3.6.1.2.1.1.3.0 = Timeticks: (138092100) 15 days, 23:35:21.00
iso.3.6.1.2.1.1.4.0 = STRING: “JVU”
iso.3.6.1.2.1.1.5.0 = STRING: “MikroTik -MLS”
iso.3.6.1.2.1.1.6.0 = STRING: “RSL”
iso.3.6.1.2.1.1.7.0 = INTEGER: 78
iso.3.6.1.2.1.2.1.0 = INTEGER: 10
iso.3.6.1.2.1.2.2.1.1.1 = INTEGER: 1
iso.3.6.1.2.1.2.2.1.1.2 = INTEGER: 2
iso.3.6.1.2.1.2.2.1.1.3 = INTEGER: 3
iso.3.6.1.2.1.2.2.1.1.4 = INTEGER: 4
iso.3.6.1.2.1.2.2.1.1.5 = INTEGER: 5
iso.3.6.1.2.1.2.2.1.1.6 = INTEGER: 6
iso.3.6.1.2.1.2.2.1.1.7 = INTEGER: 7
iso.3.6.1.2.1.2.2.1.1.8 = INTEGER: 8
iso.3.6.1.2.1.2.2.1.1.9 = INTEGER: 9
iso.3.6.1.2.1.2.2.1.1.10 = INTEGER: 10
iso.3.6.1.2.1.2.2.1.2.1 = STRING: “ether1-WAN-FTTH”
iso.3.6.1.2.1.2.2.1.2.2 = STRING: “ether2”
iso.3.6.1.2.1.2.2.1.2.3 = STRING: “ether3”
iso.3.6.1.2.1.2.2.1.2.4 = STRING: “ether4”
iso.3.6.1.2.1.2.2.1.2.5 = STRING: “ether5”
iso.3.6.1.2.1.2.2.1.2.6 = STRING: “wifi1”
iso.3.6.1.2.1.2.2.1.2.7 = STRING: “wifi2”
iso.3.6.1.2.1.2.2.1.2.8 = STRING: “bridge”
iso.3.6.1.2.1.2.2.1.2.9 = STRING: “pppoe-out1”
iso.3.6.1.2.1.2.2.1.2.10 = STRING: “lo”
iso.3.6.1.2.1.2.2.1.3.1 = INTEGER: 6
iso.3.6.1.2.1.2.2.1.3.2 = INTEGER: 6
iso.3.6.1.2.1.2.2.1.3.3 = INTEGER: 6
iso.3.6.1.2.1.2.2.1.3.4 = INTEGER: 6
elea@elastiflow:~$

does snmpcoll.yml already sent correct ?

my timezone is GMT+11 , i am available from 7PM to 9PM or saturday 26 October 8AM/10AM (always GMT+11).

I can provide you access to server.

I speak lightly english, and mostly french.

pupilos · November 19, 2024, 11:56pm

Hello
Did anyone solve that?

jvusos · November 21, 2024, 8:49pm

hi
This problem has not been solved. dexer was on subject, but no answer since end october.
need to be solved to confirm that snmpcoll work.
thanks

dxturner · November 22, 2024, 3:34pm

Apologies for the slow response. The current situation is that the collector is running and you do not see any errors in the logs, but you are not seeing any polls to or from the device in a tcpdump packet capture, and you are not seeing any data in the telemetry dashboards. Is that correct?

I believe you have my email address. Please send the latest logs and configuration files and any relevant screenshots.

Regards,
Dexter Turner

system · December 22, 2024, 3:34pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
SNMP Collector Error ElastiFlow Community snmp-collector	2	57	August 21, 2024
Version 6.4.3 of the ElastiFlow Unified Flow Collector and Unified SNMP Collect have been released ElastiFlow Community	1	101	April 18, 2024
Start snmp error ElastiFlow Community snmp-collector , warning	8	146	July 6, 2024
Version 6.4.3 - ElastiFlow Unified Flow Collector & Unified SNMP Collector Announcements flow-collector , snmp-collector	1	121	April 19, 2024
Version 6.4.4 - ElastiFlow Unified Flow Collector & Unified SNMP Collector Announcements	1	62	June 16, 2024

Snmpcoll unable to find device

Related topics