This is an old thread, but when I researched this myself, I was able to figure out what was going on here. As I could not find more documentation, and the authors PDF download goes to a broken link I am sharing how I got this to work. Per the App authors response, if you can see the SMDR data coming in while you search, you need to tell the app where to look for the data. This is the bare minimum that I did to get Avaya Call to work: 1) After installing Splunk Enterprise, download the Avaya Call .tgz file on his app page 2) Extract the .tgz archive to receive a .tar. Extract the .tar archive to SPLUNKINSTALLDIRECTORY\etc\apps\ (I used 7Zip to do this), and then restart splunk 3) In your Splunk Web portal, go to Settings --> Indexes --> New Index 4) Set the Index Name to something like 'IPO', and then set the App to AVAYA CALL under General Settings and hit Save. 5) Now go to Apps --> AVAYA CALL --> Start with the Dashboard view "Overall Performance" and click Edit. Switch the Edit Dashboard mode to 'Source'. 6) Search the dashboard source code for 'sourcelog'. You should find 'sourcelog' as the first string in every <query> section. Delete 'sourcelog' and replace it with index=THENAMEYOUGAVEYOURINDEX. Repeat for every entry, and click Save. 7) Repeat step 6 for the other 5 dashboards. 😎 Login to your IPO and go to System --> SMDR. Set the Output to SMDR Only, set the SMDR IP Address to the IP of your Splunk server, and set the port to 6969 (it doesn't have to be 6969, this is what the author used in their example). Check off Call Splitting for Diverts, and click OK. Save the IPO with save type MERGE (you shouldn't have to reboot the IPO). 9) Return to the Splunk Web portal and go to Settings --> Data inputs --> Local inputs --> TCP --> Add new 10) On the first page (Select Source) type in the same port you used on the IPO (I.E. 6969). If you wish, set 'Only accept connection from' to the IP of your IPO (not necessary). Hit Next. 11) On the second page (Input Settings): Select --> Select Source Type --> Search for tcp-raw. Now set the App context to AVAYA CALL. Set the Host method to IP. Set the Index to the Index you created earlier. Hit Review, double check the settings, and then hit Submit. 12) Place some test calls and return to the AVAYA CALL dashboards and review the data.
... View more