APP ID: Splunk-TA-cisco-catalyst-center
The Cisco Catalyst Center Splunk App and Add-on are designed to work together. The App requires the Add-on to be installed. The Add-on can be used with or without the App.
This Add-on defines and creates the following sourcetypes:
cisco:catalyst:clientcisco:catalyst:clienthealthcisco:catalyst:devicehealthcisco:catalyst:compliancecisco:catalyst:issuecisco:catalyst:networkhealthcisco:catalyst:securityadvisory⚠️ This Add-on replaces the legacy Cisco DNA Center Add-on and supports the modern Cisco Catalyst Center APIs.
Install the Cisco Catalyst Center Add-on for Splunk by:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-centerCreate and configure a Catalyst Center API user account that the Add-on will use to authenticate.
https://cdn.splunkbase.splunk.com/media/public/screenshots/017c30b3-b5ac-4b24-8f04-951151e4a1a1.png" alt="Add an account" width="1110"/>
To collect data from the Catalyst Center APIs, add one or more inputs:
https://sandboxdnac.cisco.com:443https protocol https://cdn.splunkbase.splunk.com/media/public/screenshots/bf8a2900-acca-4b09-8c9a-eed6198c6e8c.png" alt="Add cisco_catalyst_client" width="1110"/>
Repeat for additional data inputs as needed.
By default, the API calls from the Cisco Catalyst Add-on for Splunk are verified by SSL.
Configuration is located at:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-center/default/splunk_ta_cisco_catalyst_center_settings.conf
ini
[additional_parameters]
verify_ssl = True
To disable SSL verification, create or edit the following file:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-center/local/splunk_ta_cisco_catalyst_center_settings.conf
And add:
ini
[additional_parameters]
verify_ssl = False
Restart Splunk to apply changes.
This section lists the primary Catalyst Center API endpoints used by each modular input included in the Add-on.
cisco:catalyst:client)GET /dna/data/api/v1/clientscisco:catalyst:clienthealth)GET /dna/intent/api/v1/client-healthcisco:catalyst:compliance)GET /dna/intent/api/v1/compliance/countGET /dna/intent/api/v1/complianceGET /dna/intent/api/v1/compliance/detailGET /dna/intent/api/v1/network-device/{id}GET /dna/intent/api/v1/networkDevices/{id}/assignedToSitecisco:catalyst:devicehealth)GET /dna/intent/api/v1/device-healthGET /dna/intent/api/v1/network-deviceGET /dna/intent/api/v2/networkDevices/{deviceId}/interfaces/querycisco:catalyst:issue)GET /dna/intent/api/v1/issuesGET /dna/intent/api/v1/issue-enrichment-detailsGET /dna/intent/api/v1/siteGET /dna/intent/api/v1/network-device/{id}cisco:catalyst:networkhealth)GET /dna/intent/api/v1/network-healthcisco:catalyst:securityadvisory)GET /dna/intent/api/v1/security-advisory/advisory/aggregateGET /dna/intent/api/v1/security-advisory/advisoryGET /dna/intent/api/v1/security-advisory/advisory/{advisoryId}/deviceGET /dna/intent/api/v1/network-device/{id}GET /dna/intent/api/v1/networkDevices/{id}/assignedToSiteAs a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.