Come join our live training webinar every other Wednesday at 11am PST and hear LogicMonitor experts explain best practices and answer common questions. We understand these are uncertain times, and we are here to help!
The SNMP Active Discovery method is used to detect and group SNMP objects. As with all other Active Discovery methods, it also supports filtering. SNMP Active Discovery will walk a given SNMP OID, and return all objects beneath that branch of the MIB tree as the wildcard value (without the common base OID). The Alias returned depends on the Discovery Type selected.
Please note that when SNMP active discovery is run, SNMPv3 is attempted first, followed by SNMPv2 and SNMPv1 then v2c, then v1. All SNMP versions will be attempted as a means of verifying any potential version change. When SNMPv3 is used, the default user will be “logicmonitor” if none has been configured.
The parameters for SNMP Active Discovery are:
Where Discovery Type =”value”, the name or alias for each discovered instance is the value reported by each leaf of the OID tree.
e.g. A walk of the interface OID, .126.96.36.199.188.8.131.52.1.1.1, on a given system returns:
IF-MIB::ifName.2 = STRING: eth0
IF-MIB::ifName.3 = STRING: eth1
IF-MIB::ifName.4 = STRING: bond0
Using the Active Discovery section from the snmp interface monitoring datasource:
this would return 3 instances, with the following instance names and wildcard values:
Name Wildcard Value
Where Discovery Type =”wildcard”, the name/alias for each discovered instance is the unique index of each leaf of the OID tree – i.e. the name is the same as the wildcard value. Using the same Active Discovery section as in the image above, except with the type set to wildcard:
Name Wildcard Value
Where Discovery Type is Lookup another parameter is required – the Lookup OID. The name returned for each instance is the result returned by querying the Lookup OID for the value returned by the primary OID for the instance. If the object does not exist in the second OID, the index of the first OID is returned.
For example, on a Cisco router, a walk of 184.108.40.206.220.127.116.11.18.104.22.168.1.2 returns the physical index of all CPUs:
2 => 3001
1 => 3013
You can then use the returned indices to query the entPhysicalName (.22.214.171.124.126.96.36.199.188.8.131.52) table to get the descriptive name of each CPU. So, an SNMP query of 184.108.40.206.220.127.116.11.18.104.22.168.3013 returns “CPU of Routing Processor 5”, while an SNMP query of 22.214.171.124.126.96.36.199.188.8.131.52.3001 returns “CPU of Switching Processor 5”. If the Active Discovery section is configured like this:
then the following 2 instances would be returned:
Name Wildcard Value
CPU of Routing Processor 5 1
CPU of Switching Processor 5 2
SNMP Active Discovery supports flexible instance filtering. Multiple filters can be added, to include to exclude different objects.
Each Value object returned by the initial SNMP OID walk is appended to the OID in the filter section; the resulting SNMP object if retrieved, and tested against the applied tests.
For example, the below filters will walk all interfaces returned from the OID .184.108.40.206.220.127.116.11.1.2. (which returns the interface description.)
If the walk of the SNMP OID returns three interfaces, with Values of .1, .2 and .3 (i.e. their interface descriptions are available by doing an SNMP GET on .18.104.22.168.22.214.171.124.1.2.1, .126.96.36.199.188.8.131.52.1.2.2 and .184.108.40.206.220.127.116.11.1.2.3 respectively), then these interfaces will be tested against the filters.
Just taking the first interface as an example, the one with the .1 value, the interface will only be reported by ActiveDiscovery if:
Note that all filters must be passed in order for an object to be reported by ActiveDiscovery.
Instance Level Properties provide both rich instance-level information and more granular control of your monitoring.
snmpIf- (Network interface)
Interface name: eno33554960
Can also report on type, speed, physical address, last change, and much more.
Once Active Discovery is enabled on your SNMP datasource, the field “Extract Instance-Level Properties” will be displayed. Select this option.
You will be prompted to define the properties you wish to extract from your SNMP instances. To do this, you will need to provide the following information:
If any Active Discovery filters are specified, only discovered instances that meet the filter criteria will be returned.
If you choose to extract ILPs, you may add filters based on ILPs discovered. For example, with ILPs you can easily create an Active Discovery filter that display only enabled network interfaces.
In This Article