We have cisco ios logs going to our syslog server > heavy forwarder > Splunk cloud. The addon is installed on the syslog server UF, heavy forwarder and search head. Data is being parsed correctly however for dvc all we get is the syslog server. Is there something we need to configure on the addon to get the actual cisco device name?
