All Apps and Add-ons

Network Toolkit - Question

ricky_riswanto
Engager

Hi All, 

Needs your info and suggestion, can we use this app https://splunkbase.splunk.com/app/3491/#/details  to get network hierarchy automatically? like network auto discovered? 

If not, does splunk has network auto discovery feature or mechanism?

 

Labels (2)
0 Karma
1 Solution

Spranta
Splunk Employee
Splunk Employee

You can, for example, create a script that pings  a whole subnet and write the output into a csv so you can use this to create the inputs.conf automatically, or you might have a cmdb that can create such a csv?

View solution in original post

0 Karma

lekanneer
Loves-to-Learn Lots

I think it is better to import network communcation logs and then update them in my solution.

If you're looking for an efficient and functional ServiceNow to Splunk integration (also CMDB) take a look at: https://www.thedutchdatadifference.nl/splunk-servicenow/

I created that solution and continuously adding new features. It is meant to host all sorts of nodes and relationships. And I can imagine that the network communication logs can be one of them. And then even combine with what is already defined in CMDB.

0 Karma

Spranta
Splunk Employee
Splunk Employee

Hi Ricky,

as far as i know the network toolkit doesn't have any autodiscovery features.
We are creating are our input for the network toolkit from a csv file, so if you have any tool that is able to create a csv or whatever you can for example use a python script to feed the inputs.conf

 

Alex

0 Karma

ricky_riswanto
Engager

Hi Alex,


Thanks for your response, understand your point to create input.conf file. But somehow if we need to define all ip address into input.conf manually then it will not efficient.

Btw, can we use "traceroute" operation to collect route ip and gets flow network?      

Tags (1)
0 Karma

Spranta
Splunk Employee
Splunk Employee

You can, for example, create a script that pings  a whole subnet and write the output into a csv so you can use this to create the inputs.conf automatically, or you might have a cmdb that can create such a csv?

0 Karma

ricky_riswanto
Engager

Hi Alex,

Yes agree cmdb if better option for master data reference ip address. So we can lookup into cmdb then convert into input.conf file. Btw, did fping available on input.conf?

Tags (1)
0 Karma

Spranta
Splunk Employee
Splunk Employee

No i don't think that fping is available.

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...