Although most of the machinery will of course be up on Splunk Cloud, you will still need a host locally to run an SFTP server, and to also run a Splunk Forwarder that will send the SFTP’ed files up to Splunk Cloud.
Here are the full steps to set everything up:
1) In Splunk Cloud
2) On Your SFTP Server Host
3) IN CUCM
4) That’s it. Start driving around in your data
Data should now be coming in. If you have any problems at this point, check the apps “Health Checks” by going to “Setup > Run Health Checks”, and contact us.
This is also a good time to reach out to us to schedule a quick tour and some Q&A.
Further configuration steps you can take
If you have any comments at all about the documentation, please send it in to firstname.lastname@example.org.