https://community.splunk.com/t5/Getting-Data-In/How-should-i-write-the-report-for-Cisco-device-change/m-p/408825#M72457 <P>Cisco Networks App and Cisco Networks add-on on apps.splunk.com</P> <P>Read the documentation and you should be OK. Make sure you set the sourcetype as cisco:ios</P> <P>Mikael</P> Mon, 25 Jun 2018 19:14:36 GMT mikaelbje 2018-06-25T19:14:36Z https://community.splunk.com/t5/Getting-Data-In/How-should-i-write-the-report-for-Cisco-device-change/m-p/408824#M72456 <P>we migrated from netiq to Splunk recently, we wanted to have a same report here also such as Cisco, juniper device change.<BR /> so do i need to create any lookup or data model ?<BR /> is there any query already written for this, please help me to write the query do suggest best way to do this.</P> <P>we haven't started to ingest logs of Cisco into Splunk.<BR /> do we have to have any preconfigured sourectype or splunk automatically takes the sourcetype.</P> Mon, 25 Jun 2018 18:06:41 GMT https://community.splunk.com/t5/Getting-Data-In/How-should-i-write-the-report-for-Cisco-device-change/m-p/408824#M72456 thiru179 2018-06-25T18:06:41Z https://community.splunk.com/t5/Getting-Data-In/How-should-i-write-the-report-for-Cisco-device-change/m-p/408825#M72457 <P>Cisco Networks App and Cisco Networks add-on on apps.splunk.com</P> <P>Read the documentation and you should be OK. Make sure you set the sourcetype as cisco:ios</P> <P>Mikael</P> Mon, 25 Jun 2018 19:14:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-should-i-write-the-report-for-Cisco-device-change/m-p/408825#M72457 mikaelbje 2018-06-25T19:14:36Z