Getting Data In

how to line break snmp data

ahmedhassanean
Explorer

Dears,

i have configured scripted input that poll snmp of network devices using snmpwalk command but problem that walk come back to me as one events with 3000 line i would like to know how to break each line as event . please find below sample of output

IF-MIB::ifIndex.80 = 80
IF-MIB::ifIndex.736 = 736
IF-MIB::ifIndex.752 = 752
IF-MIB::ifIndex.768 = 768
IF-MIB::ifIndex.784 = 784
IF-MIB::ifIndex.800 = 800
IF-MIB::ifIndex.816 = 816
IF-MIB::ifIndex.832 = 832
IF-MIB::ifIndex.848 = 848
IF-MIB::ifIndex.864 = 864
IF-MIB::ifIndex.880 = 880
IF-MIB::ifIndex.928 = 928
IF-MIB::ifIndex.944 = 944
IF-MIB::ifIndex.960 = 960

0 Karma

DMohn
Motivator

If the events in your input are line separated, you should use the setting SHOULD_LINEMERGE = false in your props.conf (which normally defaults to true. This will split your input into one event per line.

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...