How to add network device that doesn't have splunk app or add-ons?

[subnet_warrior]

Hello experts, 

So i have extreme network switch VSP 7000 and VSP 8000 that want to send syslog to our splunk.  When i'm looking for add on or app for those devices, there is none. Is it possible to collect syslog without add-on or app in splunk? Is there any documentation? 

[isoutamo]

Hi

Yes it is possible and actually quite common way. You can start with this guide https://docs.splunk.com/Documentation/Splunk/8.2.3/Data/Getstartedwithgettingdatain. There are lot of other documentation too on net, just try google to find those.

One way is to get some other ready TA and start to look it and create on based on that. 

Here is https://docs.splunk.com/Documentation/AddonBuilder/4.0.0/UserGuide/ExtractFields link to AddOnBuilder which you can also use to get better TA which are easier to implement iso to Splunk Cloud.

r. Ismo