How to ingest Cradlepoint E3000 Series Enterprise Branch Router logs to Splunk?

[Roy_9]

Hello,

Any suggestions on onboarding Cradlepoint Router logs to Splunk? Please advise.

Thanks in advance.

[chaker]

Hi have no experience with this vendor, however the devices do support syslog:

https://customer.cradlepoint.com/articles/Knowledge/NCOS-How-to-setup-a-Cradlepoint-router-to-send-i...

As a starting point, you could open a port on Splunk and send the syslog to a test index to get an idea of what it looks like.

Be sure to review the best practice for handling syslog with Splunk (Opening a port on Splunk is NOT best practice)

Syslog-ng

https://www.splunk.com/en_us/blog/tips-and-tricks/using-syslog-ng-with-splunk.html

Splunk connect for syslog

https://www.splunk.com/en_us/blog/tips-and-tricks/splunk-connect-for-syslog-turnkey-and-scalable-sys...

Hope this helps get you started.