When set up, the Sites Lookup in the Cisco CDR app will automatically create fields holding the location name or building name, of any internal parties on each call.
Configuring this is optional, however most organizations with more than one physical location will find it extremely useful.
In Splunk terms this is a file-based lookup that ships empty and is designed to be customized by the customer. The primary key is a subnet in CIDR notation.
Adding, Editing and Removing Sites
In the app itself, select App Settings > Define sites in the navigation bar.
On this page you can build this out by adding individual subnets and assigning them to sites, or you can upload the whole list at once as a CSV file with particular columns.
Notes
- On the Edit/Delete sites tab, you can only edit a single row at a time so click save on each row before editing the next one.
- When you Add a New Site be careful not to accidentally click Add twice in a row.
- Subnets are entered into the Sites lookup in CIDR notation (like “10.11.0.0/16”)
- Uploading CSV files: If you would like to upload the subnets and sites as a CSV, start first by downloading a copy from Download CSV so you have the right format and structure. Also make sure to always take backups!
- Nested and overlapping subnets *are* supported. The app will ‘do the right thing’ and use the most specific matching entry available.
In practice this means you can throw up some extremely broad subnets on day 1, and then iteratively add many smaller subnet blocks more slowly to further define out specific areas as needed.
- If you have an IPAM solution, or your network folks keep a spreadsheet, there are many ways to import that and use it as well.
- The Find Sites to add tab will look through a particular time frame and find any IP addresses that do NOT match existing sites entries. It’s a quick way to see what’s left over or unaccounted for in your sites listings. It is also a great way to sanity check additions/changes as you make them.
Further Reading
If you haven’t already, you might review the User Documentation for Locations (specifically sites) to learn more about how users will use these fields, or even our product page on Location & Site Analysis.
If you have any comments at all about the documentation, please send them to docs@sideviewapps.com.