Getting Data In

Adding new device to splunk Cisco UCS add on

Mayanakhan
Explorer

Hi All,

In our environment, Already our team installed the "Cisco UCS Add-On" and data is getting into splunk.

Now we want to integrate new UCS devices to splunk. I have update the existing conf files with new devices details and taken a restart but data is not coming for both new and existing devices.

cisco_ucs_servers.conf

/app/splunk/etc/apps/Splunk_TA_cisco-ucs/local

[UCS_Odd1] # old device
account_name = ******
account_password = ******
description = UCS data from Odd1
server_url = xx.xx.xx.xx

[UCS_Even1]  #New device
account_name = ******
account_password = ******
description = UCS data from even1
server_url = xx.xx.xx.xx

cisco_ucs_tasks.conf

[UCS_monitoring]
description = Monitoring UCS for prod environment
disabled = 0
index = cisco-ucs
interval = 300
servers = Splunk_TA_cisco-ucs:UCS_Odd1 | Splunk_TA_cisco-ucs:UCS_Even1 
sourcetype = cisco:ucs
templates = Splunk_TA_cisco-ucs:prod

[UCS_NEW_TEST]
disabled = 1
index = main
interval = 300
servers = Splunk_TA_cisco-ucs:UCS_NEW
sourcetype = cisco:ucs
templates = Splunk_TA_cisco-ucs:prod

passwords.conf

[credential:_Splunk_TA_cisco-ucs_account_#Splunk_TA_cisco-ucs#UCS_Odd1:user:]
password = $1$qxE5qx8PFP7KMAC8oIxQG46oGG3Oatbd

[credential:_Splunk_TA_cisco-ucs_account_#Splunk_TA_cisco-ucs#UCS_Even1:user:]
password = Password!@#

After restart of splunk server the password for new device is not encrypting and data is not coming to splunk.

Can anyone help me here please?

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.