APP ID: Splunk-TA-cisco-catalyst-center
The Cisco Catalyst Center Splunk App and Add-on are designed to work together. The App requires the Add-on to be installed. The Add-on can be used with or without the App.
This Add-on defines and creates the following sourcetypes:
cisco:catalyst:client
cisco:catalyst:clienthealth
cisco:catalyst:devicehealth
cisco:catalyst:compliance
cisco:catalyst:issue
cisco:catalyst:networkhealth
cisco:catalyst:securityadvisory
⚠️ This Add-on replaces the legacy Cisco DNA Center Add-on and supports the modern Cisco Catalyst Center APIs.
Install the Cisco Catalyst Center Add-on for Splunk by:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-center
Create and configure a Catalyst Center API user account that the Add-on will use to authenticate.
https://cdn.splunkbase.splunk.com/media/public/screenshots/017c30b3-b5ac-4b24-8f04-951151e4a1a1.png" alt="Add an account" width="1110"/>
To collect data from the Catalyst Center APIs, add one or more inputs:
https://sandboxdnac.cisco.com:443
https
protocol https://cdn.splunkbase.splunk.com/media/public/screenshots/bf8a2900-acca-4b09-8c9a-eed6198c6e8c.png" alt="Add cisco_catalyst_client" width="1110"/>
Repeat for additional data inputs as needed.
By default, the API calls from the Cisco Catalyst Add-on for Splunk are verified by SSL.
Configuration is located at:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-center/default/splunk_ta_cisco_catalyst_center_settings.conf
ini
[additional_parameters]
verify_ssl = True
To disable SSL verification, create or edit the following file:
$SPLUNK_HOME/etc/apps/Splunk-TA-cisco-catalyst-center/local/splunk_ta_cisco_catalyst_center_settings.conf
And add:
ini
[additional_parameters]
verify_ssl = False
Restart Splunk to apply changes.
This section lists the primary Catalyst Center API endpoints used by each modular input included in the Add-on.
cisco:catalyst:client
)GET /dna/data/api/v1/clients
cisco:catalyst:clienthealth
)GET /dna/intent/api/v1/client-health
cisco:catalyst:compliance
)GET /dna/intent/api/v1/compliance/count
GET /dna/intent/api/v1/compliance
GET /dna/intent/api/v1/compliance/detail
GET /dna/intent/api/v1/network-device/{id}
GET /dna/intent/api/v1/networkDevices/{id}/assignedToSite
cisco:catalyst:devicehealth
)GET /dna/intent/api/v1/device-health
GET /dna/intent/api/v1/network-device
GET /dna/intent/api/v2/networkDevices/{deviceId}/interfaces/query
cisco:catalyst:issue
)GET /dna/intent/api/v1/issues
GET /dna/intent/api/v1/issue-enrichment-details
GET /dna/intent/api/v1/site
GET /dna/intent/api/v1/network-device/{id}
cisco:catalyst:networkhealth
)GET /dna/intent/api/v1/network-health
cisco:catalyst:securityadvisory
)GET /dna/intent/api/v1/security-advisory/advisory/aggregate
GET /dna/intent/api/v1/security-advisory/advisory
GET /dna/intent/api/v1/security-advisory/advisory/{advisoryId}/device
GET /dna/intent/api/v1/network-device/{id}
GET /dna/intent/api/v1/networkDevices/{id}/assignedToSite
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.