https://community.splunk.com/t5/Getting-Data-In/How-to-feed-syslog-of-another-Cisco-device-to-Splunk/m-p/407845#M72326 <P>There are two Cisco devices; I call them “1st IP” and “2nd IP” hereafter.</P> <P>I have managed to configured and send syslog of “1st IP” to Splunk. Please see following 2 screenshots.<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/6869iB7A5C345DDDB2C25/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Now i would like to another Cisco device, i.e. “2nd IP” to Splunk, by adding the “2nd IP”. It turned out to be weird to me. </P> <P>All i wanted is something like this by always using soucetype:cisco, if possible:<BR /> UDP port---------------------souce type<BR /> 192.168.1stIP:514-------- cisco<BR /> 192.168.2ndIP:514--------cisco</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/6870i80B46E670EEF3B96/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Mon, 15 Apr 2019 09:17:18 GMT splunkbeginner 2019-04-15T09:17:18Z https://community.splunk.com/t5/Getting-Data-In/How-to-feed-syslog-of-another-Cisco-device-to-Splunk/m-p/407845#M72326 <P>There are two Cisco devices; I call them “1st IP” and “2nd IP” hereafter.</P> <P>I have managed to configured and send syslog of “1st IP” to Splunk. Please see following 2 screenshots.<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/6869iB7A5C345DDDB2C25/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Now i would like to another Cisco device, i.e. “2nd IP” to Splunk, by adding the “2nd IP”. It turned out to be weird to me. </P> <P>All i wanted is something like this by always using soucetype:cisco, if possible:<BR /> UDP port---------------------souce type<BR /> 192.168.1stIP:514-------- cisco<BR /> 192.168.2ndIP:514--------cisco</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/6870i80B46E670EEF3B96/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Mon, 15 Apr 2019 09:17:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-feed-syslog-of-another-Cisco-device-to-Splunk/m-p/407845#M72326 splunkbeginner 2019-04-15T09:17:18Z