How to configure adding the data of switches and routers into the Cisco Networks App for Splunk Enterprise?
Along with the App, you'll need to install the "Cisco Networks Add-on" and to use the sourcetype cisco:ios for the Syslog data sent from the switches and routers.
I have logs data stored on Syslog-ng ---->universal forwarder----> splunk Server
I couldn't find the feature sourcetype cisco:ios for the Syslog data sent from the switches and routers.
The Networks App looks great but I Need input the data from syslog server to splunk app, that's the challenging. If you can be help me with bit more information would helps me a lot.
You will need to manually define the sourcetype in the inputs.conf under the monitor stanza:
is this path is correct where inputs.conf file located ?? (Splunk_Home/etc/system/local/inputs.conf)
There are many inputs.conf. However, it's better to do the configuration in Splunk_Home/etc/apps/search/local/inputs.conf