Configure the Splunk host as an “external billing server” in CallManager
CallManager can send CDR and CMR files to an ‘external billing server’ via FTP or SFTP.
Where you configure this inside the Cisco UCM Administration pages will depend on the version of the software.
When you find the page, adding the Splunk host as a Billing Application Server is easy. Click “Add new”. Enter the hostname or IP of your Splunk server.
Also enter the full path on the filesystem of the Splunk server to which you would like CallManager to SFTP the files.
Make sure that the “resend on failure” box is checked.
Note: In general the Splunk approach to forward data from another host, is to install the Splunk Universal Forwarder or some kind of Splunk forwarder on the production host and to forward the data to the Splunk “indexer” over TCP. For various reasons that approach does not work with CallManager. Fortunately the “external billing server” mechanism provided by Cisco works very well.
If you have any comments at all about the documentation, please send it in to firstname.lastname@example.org.