Are you a member of the Splunk Community?
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- Where are both Apps?? Cisco IOS & TA-cisco_ios Ap...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Where are both Apps?? Cisco IOS & TA-cisco_ios App's...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you have the TA installed as well as the App all you need to do is make sure your inputs logs to sourcetype syslog.. You should also make sure your Splunk user has access to the "ios" index and searches it by default.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My suggestion would be to read the parts regarding sources, sourcetypes and indexes in the Splunk documentation. The app will work out of the box as soon as you have the basics sorted out. Good luck!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Also... Inputs??? I thought the Switch is already sending the Syslog to Splunk Server??? Do I still need an Input??
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have more problems with these App's for Splunk.... I thought the App should take care of the Splunk user access to the "ios" index..??? I don't even know where to change that... Thanks...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As the TA is still pending approval from Splunk you cannot download it from Splunkbase just yet, but in the meantime you can get it from github. Check http://github.com/inspired
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The Cisco 6504 Switch is configured for Syslog to goto the Splunk Server... But the Cisco App still don't show any Info??? I see info from a search on Splunk from the Switch, but nothing from the App.... Don't see any other configuration to do on the App??
Observe and Secure All Apps with Splunk
Splunk Decoded: Business Transactions vs Business IQ
Fastest way to demo Observability
