Cisco CDR Reporting & Analytics | Installation Notes

Set up the Sites Lookup

Here we will configure the Sites Lookup in the Cisco CDR app. This is a file based lookup that ships empty in the app and that is designed to be customized by the customer. The primary key is a subnet in CIDR notation.

This is an optional feature to configure, and the app will work without it. However most folks with more than one physical location find it extremely useful.

To test it out with a few entries, you can use item 6 below to identify some potential sites (or ask your network folks), then use item 3 below to add a few (and item 2 to edit them after the fact if need be).

To do it for anything more than a dozen or so sites, you’ll likely use 4 and 5 to download/​upload it as a CSV file. 

Note: If you have not already, you might quickly review the User Documentation for Locations (specifically sites) to learn more about how users will use these fields, or even our product page on Location & Site Analysis

Adding/​Removing Sites

To set it up, go to Setup > Define Sites in the app’s main navigation bar.

On that page you can:

  1. Get more information about how to use these pages.
  2. Edit existing sites.
    • Useful for making small, quick changes to a few entries.
  3. Add new sites manually.
  4. Upload a new CSV.
    • The new CSV overwrites the old lookup, so replaces it entirely. Make sure you include everything!
    • If your network team can give you a properly formatted CSV (see #5), this is where you can upload it to your system.
  5. Download a CSV version of the existing sites.
    • You could edit this and re-upload, as per #4.
    • Also useful to give as a template” to your networking team.
  6. Or find new, unassigned sites to add.
    • Subnets that are already in a site are filtered out of this list, so don’t be alarmed that you can’t see everything!

Subnets are entered into the Sites lookup in CIDR notation (like”)


  • nested subnets *are* supported. That means you can include both more and less specific network overlaps, and the app will do the right thing’ and use the most specific matching entry available.
    In practice this means you can throw up some extremely broad subnets on day 1, and then iteratively add many smaller subnet blocks more slowly to further define out specific areas as needed.
  • If you have an IPAM solution, or your network folks keep a spreadsheet, there are many ways to import that and use it as well.
  • Sanity-check as you go by going in the Cisco CDR App to Settings > Define Sites and then clicking the Find sites to add tab. This will show you IP addresses and devices handling the most calls who are not in any of the subnets that you have defined.

Further Reading

If you haven’t already, you might review the User Documentation for Locations (specifically sites) to learn more about how users will use these fields, or even our product page on Location & Site Analysis.

If you have any comments at all about the documentation, please send them to docs@​sideviewapps.​com.


Installation Notes

There are many ways to deploy, configure and update the Splunk Universal Forwarder. Here we cover a variety of the more advanced ways to handle updating the TA for Cisco CDR Reporting and Analytics.