Cisco ASR9k model-driven telemetry

[andreas_wall]

I have been looking in to using model-driven telemetry in our Cisco ASR9k's. At the moment I am looking mostly in to stream interface counters.

Information about this on Cisco.com:

https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-6/telemetry/configuration/gu...

From what I can tell it can encode the data in protocol buffer or JSON.

I am quite new to Splunk and wonder what is needed on Splunk side to be able to handle this data. Do I need to process the data somewhere else and then send to Splunk?

Thankful for any ideas and documentation you think I should look at. Also interested if someone else has done this and how.

[venkatasri]

Hi,

Splunk has default out-of-box supported integrations on standard protocols and technology specific add-on's special purpose written for particular products being Cisco, AWS, MS Azure etc.

For your requirements you could start with existing add-on in Splunkbase which is like AppStore  for Splunk. Following add-on looks supporting ASR 9000 series devices to integrate and index data to Splunk.

Cisco Networks Add-on for Splunk Enterprise | Splunkbase

Splunk admin can help you installation of add-on splunk,  Make sure you verify the licensing terms of add-on.

If the licensing terms do not work for your case there is always a solution using standard protocols this could be enabling syslog/tcp stream on Cisco device and  Splunk has capability to receive it and index data.

-----------------------------

Please upvote if helps!