New Cisco Splunk app we have installed is creating data models in local directory(we only have 13G of available space on local) and we are running out of space. Which is stopping complete Splunk and makes it unusable to anyone. temporarily disabled Cisco app and will enabled once we have solution. ... View more

what would happen if indexer and searchhead are running different versions of splunk? ... View more

Thank you Sir, will upgrade and see how it goes from there. ... View more

We are running a very old version of Splunk. We are going to upgrade to the latest version and see what that provides us. ... View more

Mikael, getting some data now but still a lot of data not showing up. Any ideas? ... View more

we still don’t see data even after installing app on indexers. Add on on all indexers, app and add-on on search head. Screen shot attached. ... View more

Hi Mikael, We have installed this app but not seeing any results on dashboards. I have changed default index=network_syslog to replicate ours. I have tried running this dashboard searches with our index name and source(syslog) but it doesnot come back with results though we have data for index=network_syslog sourcetype=syslog results are displayed index=network_syslog sourcetype=syslog eventtype="cisco_ios-ipsla" | eval state=case(state_to == "Up", 1, state_to == "Down", -1) | strcat dvc " " ip_sla_id dvc_ip_sla_id | timechart avg(state) AS state BY dvc_ip_sla_id | fillnull value=0 no results founds Do we need to configure anything on routers or network devices? ... View more

ok, i have it installed correctly and udp is open but search data not being populated in the app ... View more

Does this app need smart call home to work? ... View more