All Apps and Add-ons
Highlighted

Cisco Networks App for Splunk Enterprise: Why am unable to view "Cisco_Device" lookup?

Splunk Employee
Splunk Employee

Hi,

I'm trying to get devices to show up under the Inventory -> Devices menu but nothing is displayed in the "software versions", "models", "mnemonics" panels. But there are plenty of IOS logs from routers and switches with sourcetype set to cisco:ios and eventtype ciscoios.
Upon clicking a device IP on the Devices panel at the bottom of the page and new view opens up with a yellow triangle warning " The lookup table 'Cisco
Device' is invalid." There is nothing displayed on the entire Device view. Is this lookup supposed to exist or created manually ?

thanks,
Shreedeep Mitra.

0 Karma

Re: Cisco Networks App for Splunk Enterprise: Why am unable to view "Cisco_Device" lookup?

Motivator

Hi,

This feature requires Smart Call Home enabled on the devices and will only work on higher end devices. See the Help page in the app for info on setting this up.

I'm going to rip this feature out of the app since it's very flaky, so I suggest that you don't go down this road. You'll be better off getting this data from Cisco Prime Infrastructure or another NMS instead of relying on Smart Call Home.

Cheers,
Mikael

View solution in original post