Is there an add-on for the Cisco Meraki devices?

[danielbb]

We have many Cisco Meraki devices sending data via syslog to Splunk. Is there an add-on for the Cisco Meraki devices, to extract the fields from the events.

One more thing. do the Meraki devices support json? 

[Splunker96]

Hello,

https://docs.splunk.com/Documentation/AddOns/released/Meraki/About

https://splunkbase.splunk.com/app/5580/#/details

Thanks

[danielbb]

Thank you, but I'm looking at data that comes as syslog from these devices.

[richgalloway]

Searching splunkbase (splunkbase.splunk.com) for "meraki" returns six results.  Perhaps one of them supports syslog.

You'll have to ask Cisco about Meraki support for JSON.

[danielbb]

>You'll have to ask Cisco about Meraki support for JSON.

Amazing point !!!

[danielbb]

The Cisco guy told us - 

syslog export in JSON format is not a viable request. All the syslog data is sent in arrays. This is in accordance to RFC5424 export format standard for syslog.