splunk / splunk-connect-for-snmp

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Empty values filled up with the index number

omrozowicz-splunk opened this issue · comments

commented

There is a certain mechanic that is not entirely correct in SC4SNMP. Sometimes, from snmpwalk we get empty values, for ex.:

IF-MIB::ifAlias.1 = STRING:

In Splunk, we fill it up with the index number, so that value is not empty (as it works terribly with the SPL queries). And it makes sense in this case, so that event looks like following:
image

But it does the same thing in the case of for ex. MAC address, and that's rather confusing than helpful:
image