All Apps and Add-ons

Cisco Networks App for Splunk Enterprise - Tenant Support?

deckemha
Explorer

Hello all,

we use the following Cisco Apps, which are working fine in general.

Cisco Networks App for Splunk Enterprise (https://splunkbase.splunk.com/app/1352)

Cisco Networks Add-on for Splunk Enterprise(https://splunkbase.splunk.com/app/1467)

 

When I edit the dashboard of the Cisco Networks App, I can find the following macro which should lead to the possiblity to select a "tenant".

Macro:

`get_tenants_for_user_role($env:user$)`

Expanded it looks like this:

 

 

inputlookup cisco_ios_tenants
| stats values(index) AS index BY tenant_name,roles
| eval index=mvjoin(index,",")
| eval index=replace(index,","," OR index=")
| eval index="index=" + index
| search [| rest splunk_server=local /services/authentication/users/$user$
| fields roles]

 

 

Unfortunatelly there is no lookup (definition) named cisco_ios_tenants, not in the App nor the Addon.

I also found in the default.xml nav that there should be a " <view name="cisco_networks_tenants" />"

This does also not exist.

 

I'm wondering on how that tentant support works and how it could be configured.

Does anymore has information about this? I was not able to find something.

 

Basically what we want to achieve (maybe there is a better way of doing it):

Our network colleagues want to have the possiblity to select the data based on something like a location/region or something. As the tentant macro is implemented nearly on all dashboards, I think that could be something to solve the problem.

Thanks in advance!

Many Regards

Michael

Labels (2)
Tags (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @deckemha,

I don't know this app, but usually there's a generating Lookup scheduled search to enable.

Check it in the alerts one of these apps.

Ciao.

Giuseppe

deckemha
Explorer

Dear Giuseppe,

thanks for your reply.

That is something I've checked already. Unfortunatelly there are no saved searches / alerts in those apps doing things like creating a lookup, etc.

Many Regards

Michael

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @deckemha,

when I need to monitor Cisco network appliances I usually use the Cisco Security Suite (https://splunkbase.splunk.com/app/5743), you could see if the features you're searching are also in this app.

Ciao.

Giuseppe

deckemha
Explorer

Hello,

thanks for the hint.

For now we'll use the inital app without tenant support.

The requestor need some time to specifiy their exact requirements.

Thanks and many Regards

Michael

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @deckemha,

if one answer solves your need, please accept one answer for the other people of Community or tell me how I can help you.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...