Cisco CDR Reporting & Analytics | Installation Notes
Here we will configure the Sites Lookup in the Cisco CDR app. This is a file based lookup that ships empty in the app and that is designed to be customized by the customer. The primary key is a subnet in CIDR notation.
This is an optional feature to configure, and the app will work without it. However most folks with more than one physical location find it extremely useful.
To test it out with a few entries, you can use item 6 below to identify some potential sites (or ask your network folks), then use item 3 below to add a few (and item 2 to edit them after the fact if need be).
To do it for anything more than a dozen or so sites, you’ll likely use 4 and 5 to download/upload it as a CSV file.
Note: If you have not already, you might quickly review the User Documentation for Locations (specifically sites) to learn more about how users will use these fields, or even our product page on Location & Site Analysis
To set it up, go to Setup > Define Sites in the app’s main navigation bar.
On that page you can:
Subnets are entered into the Sites lookup in CIDR notation (like “10.11.0.0/16”)
Notes
Further Reading
If you haven’t already, you might review the User Documentation for Locations (specifically sites) to learn more about how users will use these fields, or even our product page on Location & Site Analysis.
If you have any comments at all about the documentation, please send them to docs@sideviewapps.com.
There are many ways to deploy, configure and update the Splunk Universal Forwarder. Here we cover a variety of the more advanced ways to handle updating the TA for Cisco CDR Reporting and Analytics.