All Apps and Add-ons

How to configure Cisco ACI Add-on for Splunk Enterprise with configuration files


I have to deploy the Cisco ACI Add-on for Splunk Enterprise on a heavy forwarder without web interface. How can I configure it with the configuration files, the Readme mentions only the web interface.

0 Karma



First thing I would do is install it on a local Splunk test instance and configure it there. Then after the configuration copy the whole app across to the Heavy Forwarder. This is the route I normally take in these situations.

Else you need to go down the rabbit hole of editing the conf files manually and that might be a big pain.

For example the cisco_aci_server_setup.conf:

cisco_aci_host =
cisco_aci_port =
cisco_aci_username =
password =
is_password_authentication = 1
is_remote_user_authentication = 0
remote_user_domain_name =
remote_user_password =
is_cert_authentication = 0

It contains a password that probably is stored encrypted during the setup. This makes it very hard to manually configure it in the cli.

0 Karma
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...