Installation Overview

There’s a few main pieces to the installation of the Cisco CDR Reporting and Analytics app.

  1. Configuring an SFTP server to receive the CDR and CMR data from Call Manager.
  2. Create a new Billing Server entry in Call Manager to send the data to the SFTP server.
  3. Installing our apps into Splunk.
  4. Configuring the SFTP server to send the data to our app.
    • In the simplest cases where the SFTP server software is *on* the Splunk system, we provide a wizard in our UI to set this up.
    • Otherwise a small app, the “Splunk Universal Forwarder” is installed on the system hosting SFTP and we provide a configuration for it you can use.

Several of these can be done in parallel if there are different people who would do different parts, but even doing it all by yourself it often takes under 30 minutes.

We do provide some level of support for the installation, even for a trial. So give it a try and if you get stuck, email us at explaining where you are stuck and we can help you out!

1 – Installing our apps into Splunk

Manage Apps, Browse for more apps, then search for and install these:

Restart your Splunk server after the last one is installed. (If you do it in the above order, the last install will ask you to do so).

Three little notes for the more advanced use cases –

  1. If you have a separate indexer (or indexer cluster), you’ll have to create an index “cisco_cdr” on it.
  2. If by chance you run a search head cluster, install the apps on your deployer and deploy as usual.
  3. And if you use some app management program (Deployment Server, Git, Puppet, etc…) then just deploy our apps using your usual method.

2 – Configuring an SFTP host to receive the data (5-10 minutes)

You may already have an SFTP server in your environment – if so you can probably use it and save some time.

If you have a Linux machine with a little spare disk space, or even better if your Splunk is running on Linux then you are already set – the built-in SFTP server that comes with most Linux distributions works perfectly. These are great options.

Here are some additional pointers/tips for Windows or for Linux.

If you get stuck trying to figure out how best to arrange for all this, we’re happy to hop on a quick call and talk it through. Email us at and we’ll set something up!

3 – Sending data from Call Manager to the SFTP server

You might be an expert at setting up a new Billing Server entry in UCM. But for most people it’s not a thing you do often, if ever.

Because of that, we’ve written up a complete set of instructions on configuring UCM to SFTP data to your SFTP server.

Again, sometimes this goes awry. If you get this far and can’t figure it out, send us an email and we’ll figure out how to help!

4 – Sending the data in

If your SFTP host is on the same physical (or virtual, you know what I mean) host as Splunk, then all you have to do is

  • Open the Cisco CDR Reporting and Analytics app
  • Click our Setup menu item and select “Set up Data Inputs”
  • Keep the selection at “A single host runs both my SFTP server and Splunk Enterprise”
  • Type (or paste) in the location of the CDR files, as saved by your SFTP program.
  • Then just follow the short, easy wizard.

If your SFTP host is on a different system than Splunk, then we have a separate set of instructions to configure your forwarder.

If you have any comments at all about the documentation, please send it in to