splunk
Cisco Meraki Add-on for Splunk
Splunk Cloud
Overview
Details
The Splunk Add-on for Cisco Meraki provides comprehensive network observability and security monitoring across your Meraki organizations. This add-on collects rich data via Cisco Meraki REST APIs and webhooks to deliver insights into network performance, security, and device health. Sample visualizations are also provided to help explore the data and create custom dashboards.
The add-on provides Common Information Model (CIM) compatible knowledge to integrate with other Splunk solutions, including Splunk Enterprise Security and Splunk App for PCI Compliance. Data collection can be customized through scheduled API polling and real-time webhooks to match your monitoring requirements.
Security & Event Monitoring:
• Organization-wide security event tracking
• Air Marshal wireless threat detection
• Network device logging and audit trails
• Rapid network alerts via webhooks
Infrastructure & Performance Insights:
• Device availability and uptime monitoring
• Wireless and switching performance metrics
• Ethernet status and packet loss analytics
• Environmental sensor data tracking
• Top device rankings by usage and utilization
• Energy consumption monitoring for switches
Network Operations:
• Configuration change tracking
• SD-WAN and VPN performance monitoring
• Cellular gateway uplink status
• API usage analytics and optimization
• License and firmware auditing
Supported Cisco Meraki Devices:
• Access Points
• Security Appliances
• Switches
• Cameras
• Environmental Sensors
• Cellular Gateways
The add-on provides Common Information Model (CIM) compatible knowledge to integrate with other Splunk solutions, including Splunk Enterprise Security and Splunk App for PCI Compliance. Data collection can be customized through scheduled API polling and real-time webhooks to match your monitoring requirements.
Security & Event Monitoring:
• Organization-wide security event tracking
• Air Marshal wireless threat detection
• Network device logging and audit trails
• Rapid network alerts via webhooks
Infrastructure & Performance Insights:
• Device availability and uptime monitoring
• Wireless and switching performance metrics
• Ethernet status and packet loss analytics
• Environmental sensor data tracking
• Top device rankings by usage and utilization
• Energy consumption monitoring for switches
Network Operations:
• Configuration change tracking
• SD-WAN and VPN performance monitoring
• Cellular gateway uplink status
• API usage analytics and optimization
• License and firmware auditing
Supported Cisco Meraki Devices:
• Access Points
• Security Appliances
• Switches
• Cameras
• Environmental Sensors
• Cellular Gateways
A complete user guide for version 3 of this add-on is available from the Meraki Documentation
For the legacy version 2 of this add-on, please refer to the Splunk Documentation.
Release Notes
Version 3.1.0
April 30, 2025
- Enhanced Checkpoint Mechanism
- Reduced allowed Interval range for inputs:
- Summary Appliances Top by Utilization
- Summary Top Clients by Usage
- Summary Top Devices by Usage
- Summary Top Switches by Energy Usage
- Switch Ports Overview
- Restricted Historical data collection to a limited days for input:
- Sensor Reading History
- Dropped support for historical data collection for inputs:
- Organization networks
- Get organizations
- Firmware upgrades
- Device uplink addresses
- Licenses Subscriptions
Version 3.0.1
March 11, 2025
Improved TA upgrade experience, enabling users to transition from v2 to v3 without manual intervention.
Version 3.0.0
Feb. 7, 2025
Cisco Meraki Add-on for Splunk v3.0
Data Collection
- Device Health: Availability, uplink status, packet loss metrics
- Performance: Top devices, clients, and appliances by usage
- Security: Organization-wide security events
- Infrastructure: Device metrics, sensor data, and configuration tracking
- Management: License overview, firmware status, API analytics
New Features
- 23 new data inputs for comprehensive monitoring
- 29 pre-built dashboards for instant visibility
- Webhook support for real-time alert data
- Automatic input configuration
- API rate limit controls
Version 2.2.1
Nov. 13, 2024
Version 2.2.0
Oct. 1, 2024
Version 2.1.0
Feb. 19, 2024