Getting Data In

Adding new device to splunk Cisco UCS add on

Mayanakhan
Explorer

Hi All,

In our environment, Already our team installed the "Cisco UCS Add-On" and data is getting into splunk.

Now we want to integrate new UCS devices to splunk. I have update the existing conf files with new devices details and taken a restart but data is not coming for both new and existing devices.

cisco_ucs_servers.conf

/app/splunk/etc/apps/Splunk_TA_cisco-ucs/local

[UCS_Odd1] # old device
account_name = ******
account_password = ******
description = UCS data from Odd1
server_url = xx.xx.xx.xx

[UCS_Even1]  #New device
account_name = ******
account_password = ******
description = UCS data from even1
server_url = xx.xx.xx.xx

cisco_ucs_tasks.conf

[UCS_monitoring]
description = Monitoring UCS for prod environment
disabled = 0
index = cisco-ucs
interval = 300
servers = Splunk_TA_cisco-ucs:UCS_Odd1 | Splunk_TA_cisco-ucs:UCS_Even1 
sourcetype = cisco:ucs
templates = Splunk_TA_cisco-ucs:prod

[UCS_NEW_TEST]
disabled = 1
index = main
interval = 300
servers = Splunk_TA_cisco-ucs:UCS_NEW
sourcetype = cisco:ucs
templates = Splunk_TA_cisco-ucs:prod

passwords.conf

[credential:_Splunk_TA_cisco-ucs_account_#Splunk_TA_cisco-ucs#UCS_Odd1:user:]
password = $1$qxE5qx8PFP7KMAC8oIxQG46oGG3Oatbd

[credential:_Splunk_TA_cisco-ucs_account_#Splunk_TA_cisco-ucs#UCS_Even1:user:]
password = Password!@#

After restart of splunk server the password for new device is not encrypting and data is not coming to splunk.

Can anyone help me here please?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...