# Manipulate cisco snmp user cli data **URL:** \ **Category:** Get Help\ **Tags:** cisco\ **Created:** [April 23, 2024, 3:30pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092 "2024-04-23T15:30:00Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![bgoulet00](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bgoulet00](https://forum.ansible.com/u/bgoulet00)\ **Post date:** [April 23, 2024, 3:30pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/1 "2024-04-23T15:30:00Z")
i’m looking to delete all existing snmp users from a device. the results of ‘show snmp users’ comes back in a format i can’t figure out how to work with. if this data could be converted to a list of dictionaries, 1 dict per user, i could iterate through it but i can’t figure out how to do the conversion. i’m relatively experienced in working with ansible for cisco devices but i have little to no experience in transforming data so please lay it on me nursery school level devices with no snmp users returns an empty string “” devices with 1 snmp user return the 6 lines relevant to that user devices with more than 1 snmp user return an empty string separating the user data example of 2 users ```auto "stdout_lines": [ [ "User name: EGW", "Engine ID: 800000090300D4ADBD347980", "storage-type: nonvolatile\t active", "Authentication Protocol: SHA", "Privacy Protocol: AES128", "Group-name: V3Group-authPriv", "", "User name: snmp-ro", "Engine ID: 800000090300D4ADBD347980", "storage-type: nonvolatile\t active", "Authentication Protocol: SHA", "Privacy Protocol: AES128", "Group-name: readonly" ] ], ``` example of no users: ```auto "stdout_lines": [ [ "" ] ], ``` ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [April 23, 2024, 3:55pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/2 "2024-04-23T15:55:41Z")
If you have [jc](https://pypi.org/project/jc/) installed on the Ansible controller you could use the [ini filter](https://kellyjonbrazil.github.io/jc/docs/parsers/ini) with [the jc module](https://docs.ansible.com/ansible/latest/collections/community/general/jc_filter.html) to convert the standard out into a list of user dictionaries, eg: ```yaml - name: Set a fact for the user dictionaries ansible.builtin.set_fact: users: "{{ var_used_to_register_the_output.stdout | community.general.jc('ini') }}" when: var_used_to_register_the_output.stdout_lines | length > 0 - name: Debug users ansible.builtin.debug: var: users when: users is defined ``` Or you could use [the new ini filter](https://docs.ansible.com/ansible/latest/collections/community/general/from_ini_filter.html), then once you have the data as JSON it would be easier to transform it — could you provide some examples of what you want to do? ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [April 23, 2024, 4:40pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/3 "2024-04-23T16:40:11Z")
Actually looking at this some more my examples wouldn’t work due to the duplicates, there is the [JC ini dupe filter](https://kellyjonbrazil.github.io/jc/docs/parsers/ini_dup) that could be used but I expect it would be better to split the data on the empty line first, I’m not sure how best to do that, I’ll have a ponder… ---
**Author:** ![bgoulet00](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bgoulet00](https://forum.ansible.com/u/bgoulet00)\ **Post date:** [April 23, 2024, 4:55pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/4 "2024-04-23T16:55:45Z")
for an example of what i want to do…i’m looking to delete all snmp users discovered on the device. i really only need the username and group name to do this. if the data were in a list of dicts i would approach it like this… ‘’’ - name: delete all snmp users ios\_config: lines: - “no snmp-server user {{item[‘username’}} {{item[‘group’}} v3” with\_items: “{{snmp\_users}}” ‘’’ ---
**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\ **Post date:** [April 23, 2024, 6:39pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/5 "2024-04-23T18:39:53Z")
You should be able to get user data from `cisco.ios.ios_facts` in an easily parsed list. I’m not familiar with the structure specifically, but you can look at it with this: ```yaml tasks: - name: Get switch facts cisco.ios.ios_facts: - name: Show facts debug: var: ansible_network_resources ``` Based on the [code](https://github.com/ansible-collections/cisco.ios/blob/main/plugins/module_utils/network/ios/facts/snmp_server/snmp_server.py), I suspect the var you’re looking for will be something along these lines: `"{{ ansible_network_resources.snmp_server.users }}"`, which may or may not be undefined when empty. So something like: ```yaml - name: delete all snmp users cisco.ios.ios_config: lines: - “no snmp-server user {{ item.username }} {{ item.group }} v3” loop: "{{ ansible_network_resources.snmp_server.users }}" when: ansible_network_resources.snmp_server.users is defined ``` ---
**Author:** ![bgoulet00](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bgoulet00](https://forum.ansible.com/u/bgoulet00)\ **Post date:** [April 24, 2024, 2:34pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/6 "2024-04-24T14:34:33Z")
Thanks Caleb. i looked in facts before and didn’t see anything snmp and i’m getting ansible\_network\_resources as an empty dict. from the documentation it seems i have to call on that explicitly to get the data but everything i try results in some unknown error ```auto - name: get facts ios_facts: gather_subset: min gather_network_resources: snmp_server ``` ```auto The full traceback is: File "/tmp/ansible_ios_facts_payload_85dpnzgl/ansible_ios_facts_payload.zip/ansible_collections/ansible/netcommon/plugins/module_utils/network/common/facts/facts.py", line 134, in get_network_resources_facts self._connection, self.ansible_facts, data File "/tmp/ansible_ios_facts_payload_85dpnzgl/ansible_ios_facts_payload.zip/ansible_collections/cisco/ios/plugins/module_utils/network/ios/facts/snmp_server/snmp_server.py", line 87, in populate_facts self.sort_list_dicts(objs) File "/tmp/ansible_ios_facts_payload_85dpnzgl/ansible_ios_facts_payload.zip/ansible_collections/cisco/ios/plugins/module_utils/network/ios/facts/snmp_server/snmp_server.py", line 52, in sort_list_dicts objs[k] = sorted(objs[k], key=lambda _k: str(_k[p_key[k]])) File "/tmp/ansible_ios_facts_payload_85dpnzgl/ansible_ios_facts_payload.zip/ansible_collections/cisco/ios/plugins/module_utils/network/ios/facts/snmp_server/snmp_server.py", line 52, in objs[k] = sorted(objs[k], key=lambda _k: str(_k[p_key[k]])) [WARNING]: ['connection local support for this module is deprecated and will be removed in version 2.14, use connection ansible.netcommon.network_cli'] fatal: [10.60.5.2]: FAILED! => { "ansible_facts": { "discovered_interpreter_python": "/usr/libexec/platform-python" }, "changed": false, "invocation": { "module_args": { "available_network_resources": false, "gather_network_resources": [ "snmp_server" ], "gather_subset": [ "min" ], "provider": { "auth_pass": null, "authorize": false, "host": null, "password": null, "port": null, "ssh_keyfile": null, "timeout": null, "username": null } } } } MSG: 'username' ``` i’ve tried all kinds of variations of subset and network\_resources and all of them fail. mostly with the MSG: ‘username’ but on at least one occasion the MSG was ‘NoneType’ object has no attribute ‘group’ ---
**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\ **Post date:** [April 24, 2024, 2:45pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/7 "2024-04-24T14:45:04Z")
> [@bgoulet00](#): > > `[WARNING]: ['connection local support for this module is deprecated and will be removed in version 2.14, use connection ansible.netcommon.network_cli']` Not sure how, but it seems you’re gathering facts your controller, not the switch. ---
**Author:** ![bgoulet00](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bgoulet00](https://forum.ansible.com/u/bgoulet00)\ **Post date:** [April 24, 2024, 2:54pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/8 "2024-04-24T14:54:21Z")
it is grabbing facts from the switch, not the controller. that is just a warning that i’m using the old method of connection: local which is deprecated and will be removed in a future version. i changed it to connection: network\_cli and still get the same results. ---
**Author:** ![Denney-tech](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/denney-tech/32/1556_2.png) [@Denney-tech](https://forum.ansible.com/u/Denney-tech)\ **Post date:** [April 24, 2024, 2:58pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/9 "2024-04-24T14:58:18Z")
Can you share what version of ansible and cisco.ios you’re using? `ansible --version` `ansible-galaxy collection list cisco.ios` ---
**Author:** ![bgoulet00](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bgoulet00](https://forum.ansible.com/u/bgoulet00)\ **Post date:** [April 24, 2024, 4:44pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/10 "2024-04-24T16:44:05Z")
ansible 2.11.12 cisco.ios 2.6.0 i was in the process of building a new ansible box on the side anyways so i finished up with community package 8.0 and now i’m able to pull the snmp-server data ansible 2.15.11 cisco.ios 4.5.0 thanks for your help ---
**Author:** ![sparky](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/sparky/32/7086_2.png) [@sparky](https://forum.ansible.com/u/sparky)\ **Post date:** [April 30, 2024, 10:12pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/11 "2024-04-30T22:12:04Z")
I think this will accomplish what you are looking for: (includes optional ‘when’ to keep specific users if desired) ```auto --- - name: Just the Facts cisco.ios.ios_facts: gather_network_resources: - snmp_server - name: "SNMP user cleanup" cisco.ios.ios_config: lines: "no snmp-server user {{ snmp_user.username }} {{ snmp_user.group }} {{snmp_user.version }}" loop: "{{ ansible_facts.network_resources.snmp_server.users }}" loop_control: loop_var: snmp_user # when: snmp_user.username not in ['keep_user_1', 'keep_user_2'] ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [May 30, 2024, 10:12pm UTC](https://forum.ansible.com/t/manipulate-cisco-snmp-user-cli-data/5092/12 "2024-05-30T22:12:53Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.