Getting Data In

How to add network device that doesn't have splunk app or add-ons?

subnet_warrior
New Member

Hello experts, 

So i have extreme network switch VSP 7000 and VSP 8000 that want to send syslog to our splunk.  When i'm looking for add on or app for those devices, there is none. Is it possible to collect syslog without add-on or app in splunk? Is there any documentation? 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

Yes it is possible and actually quite common way. You can start with this guide https://docs.splunk.com/Documentation/Splunk/8.2.3/Data/Getstartedwithgettingdatain. There are lot of other documentation too on net, just try google to find those.

One way is to get some other ready TA and start to look it and create on based on that. 

Here is https://docs.splunk.com/Documentation/AddonBuilder/4.0.0/UserGuide/ExtractFields link to AddOnBuilder which you can also use to get better TA which are easier to implement iso to Splunk Cloud.

r. Ismo

 

0 Karma
Get Updates on the Splunk Community!

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more with ITSI’s ...

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more! Faster Time to ValueManaging and ...

New Release | Splunk Enterprise 9.3

Admins and Analyst can benefit from:  Seamlessly route data to your local file system to save on storage ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...