Details

This is a Stateful App for sending log information from APIC to SPLUNK Indexer

Pre-Requisite:
1. https to be enabled for the POD on APIC
Fabric->Fabric Policies->Pod Policies->Policies->Management Access->default
HTTPS
Admin State: Enabled

2. Splunk Enterprise with Cisco ACI App
This app needs Cisco ACI App to be installed on Splunk instance
Download the app from: https://splunkbase.splunk.com/app/1896/

3. Timestamp is in sync between APIC and Splunk Enterprise

Key Features:

• Overall fabric health score monitoring

• Top affected tenants, their health score and faults with the drilldown capability to look into fault descriptions and recommended actions.

• Top affected spines and leafs, their health score and faults with the drilldown capability to look into their physical components e.g. chassis, fan tray, power supply, supervisor etc.

• Trending of faults over time, by cause and by impacted assets

• Threshold setting for KPI's (e.g tenants, end point groups, contracts, filters, bridge domains and l3out networks) and generate alerts when threshold exceeds warning/critical limits

• Provides Top TCAM percentage used nodes and Port utilization of leafs and spines. Also provides tenant-based utilization report for bandwidth consumed

• Authentication tracking

• Ability to correlate ACI compute and storage data with data collected by Splunk app for VMware


HOW TO CONFIGURE:

1. Open CiscoSplunkConnector in installed apps tab

2. Enter Splunk Applicance IP Address:

3. Username:

4. Password:

5. Active Port Number:
This can be found on Splunk Enterprise under
Settings->Forwarding and receiving->Receive data:
< #Listen on this port >


CAVEATES:

In order for this application in production environments, we have disabled http for this app.
THE APP WILL NOT WORK IF HTTPS IS DISABLED

Currently there is no feedback after hitting the "Submit" button on the app. If the credentials are entered correctly, be rest assured that the APP is working fine

Next Version of the app will have enhanced UI interactions

More Info

API

Upon user submit

Permissions

admin

Permissions Level

write

Developer contact

aciappcenter-support@external.cisco.com
123-4567890
http://www.cisco.com/aci/

Submit a Review

{{300 - reviewText.length}}
Review can't be empty
Review can have maximum of 300 characters