All Apps and Add-ons

Cisco Networks App/Add-on for Splunk Enterprise: What are the configuration steps/commands for NX-OS devices?

guilmxm
SplunkTrust
SplunkTrust

Hi,

We are looking at implementing the Cisco Networks App for Splunk Enterprise in our systems to manage especially our Cisco Nexus devices (N5K / N7K families).

Our network team informs me that the help of the application only contains configuration commands for IOS devices. Does anyone has the good and/or detailed configuration steps for NS/OS devices?

For the Call Home service, I have found this:
https://answers.splunk.com/answers/334280/cisco-networks-app-for-splunk-enterprise-can-anybo.html

What the logging configurations?

Thank you very much, this application is very great, thanks to the author for its great work!

Guilhem

0 Karma
1 Solution

mikaelbje
Motivator

I've updated the Help page in my development repository with documentation for NX-OS. I will release a new version of the app with the details eventually. You can access the development repository here: https://github.com/inspired/cisco_ios

In the meantime use the following configuration for Call-Home on NX-OS:

callhome
  site-id ["YOUR_SITE_NAME"]
  email-contact [YOUR.EMAIL@ADDR.ESS]
  phone-contact [YOUR PHONE NUMBER]
  streetaddress S01
  destination-profile Splunk
  destination-profile Splunk format XML
  destination-profile Splunk transport-method http
  destination-profile Splunk http http://[YOUR SYSLOG/SPLUNK SERVER IP]:[YOUR SMART CALL HOME TCP PORT]
  destination-profile Splunk alert-group Diagnostic
  destination-profile Splunk alert-group EEM
  destination-profile Splunk alert-group environmental
  destination-profile Splunk alert-group inventory
  destination-profile Splunk alert-group license
  destination-profile Splunk alert-group linecard-hardware
  destination-profile Splunk alert-group supervisor-hardware
  destination-profile Splunk alert-group system
  destination-profile Splunk alert-group test
  transport http use-vrf [YOUR MGMT VRF]
  enable
  periodic-inventory notification interval  1
  periodic-inventory notification timeofday 22:30

View solution in original post

mikaelbje
Motivator

I've updated the Help page in my development repository with documentation for NX-OS. I will release a new version of the app with the details eventually. You can access the development repository here: https://github.com/inspired/cisco_ios

In the meantime use the following configuration for Call-Home on NX-OS:

callhome
  site-id ["YOUR_SITE_NAME"]
  email-contact [YOUR.EMAIL@ADDR.ESS]
  phone-contact [YOUR PHONE NUMBER]
  streetaddress S01
  destination-profile Splunk
  destination-profile Splunk format XML
  destination-profile Splunk transport-method http
  destination-profile Splunk http http://[YOUR SYSLOG/SPLUNK SERVER IP]:[YOUR SMART CALL HOME TCP PORT]
  destination-profile Splunk alert-group Diagnostic
  destination-profile Splunk alert-group EEM
  destination-profile Splunk alert-group environmental
  destination-profile Splunk alert-group inventory
  destination-profile Splunk alert-group license
  destination-profile Splunk alert-group linecard-hardware
  destination-profile Splunk alert-group supervisor-hardware
  destination-profile Splunk alert-group system
  destination-profile Splunk alert-group test
  transport http use-vrf [YOUR MGMT VRF]
  enable
  periodic-inventory notification interval  1
  periodic-inventory notification timeofday 22:30

guilmxm
SplunkTrust
SplunkTrust

Thank you for your quick answer !
I got config commands from git, and send them to our team

Great work 😉

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...