Thanks Mitesh,   The "failed to create input" was because I already had one the same from previous testing! The rest of the app is still a mystery to me, I have emailed Cisco but no reply   Thanks again FQzy ... View more

Thank you Mitesh_Gajjar Unfortunately, https://splunkbase.splunk.com/app/7404) gives this very useful information: No information provided. Reach out to the developer to learn more.   The link to the Cisco website is for a different App altogether, so not much further along. (https://splunkbase.splunk.com/app/5558)  is also a different app Thanks for your efforts however! ... View more