Configure Cisco Nexus Dashboard alerts for ITSI 4.21.x and higher

Learn how to configure Cisco Nexus Dashboard alerts for ITSI 4.21.x and higher to ensure proper data normalization and alert management.

The Cisco DC Networking App for Splunk does not normalize alerts data. To ingest and normalize alerts from Cisco Nexus Dashboard to ITSI 4.21.x and higher, you can use either of the following methods:

  1. Activate the default connection in the Cisco Nexus Dashboard data integration. The default connection is prefilled with the required data fields to normalize alerts as well as the optional Entity Lookup Field, which is used by ITSI to determine which services and entities are affected by an alert. The default connection sets the Entity Lookup Field to itsi_entity_id for Cisco Nexus Dashboard.

  2. Create a new data connection in the Cisco Nexus Dashboard data integration. The data integration includes a template that you can use to manually map data fields to normalize alerts.

Cisco Nexus Dashboard alerts use the sourcetypes cisco:dc:nd:anomalies and cisco:dc:nd:advisories.

For more information about data normalization, see Overview of the Splunk Common Information Model.

Activate the default connection in the Cisco Nexus Dashboard data integration

Complete the following steps to activate the default connection in the Cisco Nexus Dashboard data integration.

  1. From the ITSI main menu, select Configurations > Data Integrations.

  2. The Integrations library tab is selected by default. Under Alerts, select Cisco Nexus Dashboard.

  3. Select nexus_dashboard_default.

  4. Select the actions menu (...) next to Inactive.

  5. Select Activate.

Create a new connection in the Cisco Nexus Dashboard data integration

Complete the following steps to create a new connection in the Cisco Nexus Dashboard data integration.

  1. From the ITSI main menu, select Configurations > Data Integrations.

  2. The Integrations library tab is selected by default. Under Alerts, select Cisco Nexus Dashboard.

  3. Select Add connection.

  4. Follow the on-screen instructions.

(Optional) Configure additional alerts

For more information on configuring different types of alerts, see the topics under KPI alerting in the Service Insights manual.

You can also use the Content Pack for ITSI Monitoring and Alerting to configure additional alerting and service monitoring capabilities. For more information, see About the Content Pack for ITSI Monitoring and Alerting.