Erasmith Add-on for Device42
Overview
Details
Detailed Description:
The Erasmith Add-on for Device42 is designed to fetch device data from Device42 and push it into Splunk for further analysis and monitoring. Device42 provides comprehensive infrastructure and asset management capabilities, and this add-on focuses specifically on retrieving device-related information using Device42’s REST API.
This add-on uses a modular input developed in Python to connect to Device42, fetch structured data about devices, and forward it to a specified index in Splunk. Authentication is handled via API tokens, and configuration is managed through a custom .conf file that includes parameters such as polling interval, target index, and API details.
Key Capabilities:
- Device Data Collection Only: Retrieves detailed information about devices including names, IP addresses, MAC addresses, serial numbers, and hardware details from Device42.
- Custom Configuration: Supports easy setup via a
.conffile to define API access and Splunk indexing behavior. - Splunk Integration: Pushes the device data into Splunk using a defined source type for seamless indexing and further correlation.
Use Cases:
- Importing accurate device inventory into Splunk
- Enhancing CMDB visibility within Splunk
- Correlating device data with operational or security events
- Enabling custom dashboards and reports using Splunk’s search capabilities
This add-on strictly handles the import of device data and does not fetch any other data types from Device42. It serves as a lightweight, focused tool for organizations that need up-to-date device inventory inside their Splunk environment.
Release Notes
Version 1.0.0
First release of the Erasmith Add-on for Device42. Supports fetching device data from Device42 using REST API. Pushes retrieved data into Splunk using modular inputs. Configurable via custom .conf files.