topic Re: Splunk for Cisco Network Devices in Getting Data In

Splunk for Cisco Network Devices

CeJay — Mon, 13 May 2013 22:56:23 GMT

Hi All

We currently have splunk installed, and have a fleet of cisco devices feeding syslog to it. This includes: Datacentre Switches, Switches, routers, firewalls, waas optimisers etc.

Now splunk has already shown it's value, I was just wondering what if any apps are out there that people can recommend?

I've had a look at splunk apps. I was wondering what apps other people are using to better present the cisco syslog coming into splunk.

thanks

Re: Splunk for Cisco Network Devices

CeJay — Wed, 15 May 2013 22:47:40 GMT

I know you can get the cisco enterprise secruity app, but that's not an option for us. Any assistance or feedback from people would be great.

Re: Splunk for Cisco Network Devices

a212830 — Thu, 16 May 2013 01:00:35 GMT

Cisco IOS App?

Re: Splunk for Cisco Network Devices

kml_uvce — Thu, 16 May 2013 02:22:27 GMT

it depends on what firewall, routers you are using as there are seaprate apps like for cisco -asa apps etc in splunkbase.

Re: Splunk for Cisco Network Devices

CeJay — Thu, 16 May 2013 03:52:46 GMT

I am specifically after apps for switches such as - nexus 5000 series, nexus 7000 series, various cisco routers, cisco 3750 switches etc.
The routers are almost across the full suite of products, ie 2921 routers. 2800s etc. 7204's

Re: Splunk for Cisco Network Devices

CeJay — Thu, 16 May 2013 23:31:00 GMT

That app looks like it might be useful

Re: Splunk for Cisco Network Devices

d12harshal — Tue, 17 Sep 2013 15:14:15 GMT

Hi CeJay,
Can you please suggest me which app is good for nexus 5000 series, nexus 7000 series, etc..., Because I have to configure Splunk to get data and reports from switches.

Thank You.

Re: Splunk for Cisco Network Devices

WarrenWilson — Thu, 07 Nov 2013 23:42:11 GMT

We too, are looking at Apps or specific strings to be able to parse NetFlow and other valuable switch data (link saturation, state, etc.) from Splunk, for our Cat6500, 3750G, and 3750X family of switches. We currently use IPSwitch Flow Monitor for this, but would rather create meaningful dashboards and searches in Splunk so that the IPSwitch product can eventually retire.

Re: Splunk for Cisco Network Devices

CeJay — Fri, 08 Nov 2013 01:48:25 GMT

As of yet I have not been able to find any useful apps specifically for switches and routers, and have started making my own dashboard, it also matters what info you are after.

Re: Splunk for Cisco Network Devices

CeJay — Fri, 08 Nov 2013 01:49:05 GMT

As of yet I have not been able to find any useful apps specifically for switches and routers, and have started making my own dashboard, it also matters what info you are after.

Re: Splunk for Cisco Network Devices

Damien_Dallimor — Fri, 08 Nov 2013 02:10:43 GMT

Not syslog , but this new blog about getting visibility into your Cisco Nexus Network Devices using the SNMP Modular Input might be of interest you.

http://blogs.splunk.com/2013/11/06/adventures-with-snmp-and-cisco-nexus-pt1/