All Apps and Add-ons

How do you visualize Cisco UCS data using the Splunk Add-on for Cisco UCS?

nathanpyun
Explorer

Hello all,

How do you monitor CISCO UCS? I installed Add-on for Cisco UCS, and it is collecting data. However, I cannot get the App to work, or cannot find the latest App for Cisco UCS. I have Splunk Enterprise version 6.2.3, and tried Analytics for Cisco UCS version 1.0, but does not work correctly.

Can someone help please?
Thank you in advance.

Albrto
New Member

I cant find them

0 Karma

vqd361
Path Finder

The add-on only comes with prebuilt dashboard panels.

  1. Create a new dashboard
  2. Add a panel. The "Add Panel" dialog box slides in from the right side of the screen.
  3. Search for "Cisco UCS" in the Add Panel dialog box, or expand the "Add Prebuild Panel" section. You will then see the UCS visualizations.
0 Karma

bwooden
Splunk Employee
Splunk Employee

Splunk Supported Add-Ons focus on organizing data in a way that maps it to the Splunk Common Information Model. This allows indepdent apps to focus on specific use cases, advanced concepts, and rich user interfaces. Yet those apps have to be written to take advantage of that mapping (e.g. The Splunk App for Enterprise Security).

It does not appear as though the app you reference above (The Analytics for Cisco UCS app) has been re-written to take advantage of the Add-On.

There are 3 options:

  1. Visualize the data by exploring the pre-built panels that ship with The Splunk Add-On for Cisco UCS (these are just proof of concepts not meant to provide app-level experiences)
  2. Delete the Add-On and exclusively use the legacy Analytics for Cisco UCS app
  3. Use The Analytics for Cisco UCS app as inspiration and create a bespoke set of dashboards & experiences that use the knowledge from The Splunk Add-On for Cisco UCS -- and then upload it to Splunkbase for everyone else to use. 😃

halr9000
Motivator

Author of the analytics app here, and everything @bwooden says is right. I think you'll find the prebuilt panels are super easy to use for getting started.

Also, if anyone wants to help update my app, I'd be happy to have help. It was always a side project as opposed to the new add-on which is a fully supported product.

bwooden
Splunk Employee
Splunk Employee

Are you using the latest supported add-on version for Cisco UCS from Splunkbase? Once you have that, the related setup instructions should help you index the data successfully.

0 Karma

nathanpyun
Explorer

Yes, I have the latest version of the add-on, version 2.0, and it is collecting the data. However, how do I visualize the data just as it is shown in this article?
https://www.splunk.com/content/dam/splunk2/pdfs/fact-sheets/splunk-for-cisco-ucs.pdf

Thank you.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Create a dashboard, add panels, search for UCS.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...