Entity search SPL:

`itsi_cp_catalyst_center_index` sourcetype="cisco:dnac:site:topology" type IN ("building", "floor") 
| dedup cisco_catalyst_host id 
| rename cisco_catalyst_host as cisco_dnac_host, nameHierarchy as site_name, id as site_id, type as site_type, floorNumber as floor_number, unitsOfMeasure as units_of_measure, rfModel as rf_model 
| eval iter=mvrange(0, mvcount(split(site_name, "/"))), site_hierarchy=mvmap(iter, mvjoin(mvindex(split(site_name, "/"), 0, iter), "/")), etype="Cisco Catalyst Center Sites", entity_title=site_name 
| rex field=cisco_dnac_host "https://(?<cisco_dnac_hostname>.*)" 
| table entity_title, site_name, site_id, cisco_dnac_host, cisco_dnac_hostname, site_hierarchy, site_type, floor_number, latitude, longitude, address, country, length, width, height, units_of_measure, rf_model, etype

Column mapping:

Column name	Import column as
entity_title site_name site_id	Entity Identifier Fields
entity_title	Entity Title
etype	Entity Type
All fields except entity_title and etype	Entity Information Fields

Entity search SPL:

`meraki_index` sourcetype="meraki:organizationsnetworks" organizationId="*" 
| dedup id 
| rename id as Network_ID, organizationId as Organization_ID, timeZone as Timezone, tags{} as Tags, url as URL, notes as Notes, name as Network 
| table Organization_ID, Network_ID, Network, Timezone, Tags, URL, Notes 
| join Organization_ID 
    [ 
    | search `meraki_index` sourcetype="meraki:organizations" 
    | dedup id 
    | rename id as Organization_ID, name as Organization_Name, cloud.region.name AS Region_Name, cloud.region.host.name AS Region_Host 
    | table Organization_ID, Organization_Name, Region_Name, Region_Host 
    ] 
| eval etype="Meraki Network" 
| rex field=URL "https:\/\/(?<URL>.*)" 
| eval Tags=coalesce(Tags, "Untagged") 
| table Organization_Name, Organization_ID, Network_ID, Network, Region_Name, Region_Host, Timezone, Tags, URL, Notes, etype

Column mapping:

Column name	Import column as
Network_ID	Entity Identifier Fields
Network	Entity Title
etype	Entity Type
All fields except Network and etype	Entity Information Fields