Install the Content Pack for Cisco Data Center

This task guides you through the installation of the Content Pack for Cisco Data Center.

Complete the following high-level steps to install the Content Pack for Cisco Data Center.
  1. Review the deployment requirements.
  2. Complete the prerequisite steps.
  3. Install the content pack.

Deployment requirements

This document outlines the necessary software versions and configurations required for deploying the Cisco DC Networking App for Splunk.

Content pack version ITSI version ITEW version Splunk App for Content Packs version Cisco DC Networking App for Splunk version
1.0.0

For generic alerts data integration support: 4.20.x and higher

For specific alerts data integration support: 4.21.x and higher

 4.20.x 2.5.0 1.2.0

Prerequisite steps

This task outlines the necessary steps to prepare for installing the Content Pack for Cisco Data Center.

You must complete the following prerequisite steps to install the Content Pack for Cisco Data Center. For version requirements, see the previous section.

  1. Create a full backup of ITSI.
  2. Install the Splunk App for Content Packs.
  3. Install the Cisco DC Networking App for Splunk. See the Installation tab of the Splunkbase listing for details.
  4. Add your Nexus Dashboard (ND) account for the Cisco DC Networking App for Splunk:
    1. From the Splunk Enterprise main menu, select Apps > Cisco DC Networking App for Splunk.
    2. Select the Configuration tab.
    3. Select Add.
    4. From the Add ND Accounts dialog:
      1. Complete the required fields to create a new account.
      2. Select Add.
  5. Create the following four required inputs (repeat the following steps for each input):
    • Advisories [sourcetype: cisco:dc:nd:advisories] - Required for entity dashboard and alerts integration.
    • Anomalies [sourcetype:cisco:dc:nd:anomalies] - Required for entity dashboard and alerts integration.
    • Fabrics [sourcetype:cisco:dc:nd:fabrics] - Required for service import.
    • Switches [sourcetype:cisco:dc:nd:switches] - Required for entity discovery.
    1. Select the Inputs tab.
    2. Select Create New Input > ND.
    3. From the Add ND dialog:
      1. Enter a name for the input and select your ND account.
      2. For Interval, the default is 300 seconds. For Fabrics and Switches, you may increase this to 600 seconds or more.
      3. Select one of the four required Input Types (Advisories, Anomalies, Fabrics, Switches).
      4. Select Add.
    4. Follow steps 2 to 3 to create the other required input types.

Install the content pack

Learn how to install the Content Pack for Cisco Data Center by following these steps.

Complete the following steps to install the Content Pack for Cisco Data Center.
  1. From the ITSI main menu, select Configuration > Data Integrations.
  2. Select the Content library tab.
  3. Under Splunk Supported Content Packs, select Cisco Data Center.
  4. Follow the on-screen instructions to install the content pack.