Supporting App for AXL | Installation Notes

AXL Install 2 - Install the app

Install the SA_​cisco_​cdr_​axl app into Splunk

  1. Log into Splunk
  2. Get to the Manage Apps” page – either using the Apps menu at the top left of most pages in Splunk, or by going back to the Launcher” app and clicking manage apps at the bottom left.
  3. Click the green button to Browse more apps” in the upper right.
  4. Search for Cisco AXL and you’ll see our app.
    1. You should be able to just click Install” and it will prompt you to restart Splunk after. If you see the app from that page but you don’t seem to be able to Install it, please contact us.
  5. ALTERNATIVE: If your Splunk admins have locked down your instance such that it can’t talk to Splunkbase, then you can download the tar.gz direct from Splunkbase and save it locally. Then in that same Manage Apps” page from above you’ll see an Install App From File” button. Click that and follow the prompts.

Configure the SA_​cisco_​cdr_​axl app

These steps are performed in the filesystem of the Splunk server itself.

Install” AXL SQL Toolkit files

  1. Copy the three files AXLAPI.wsdl, AXLEnums.xsd and AXLSoap.xsd from the temporary directory where you extracted them before, to your $SPLUNKHOME/​etc/​apps/​SA_​cisco_​cdr_​axl/​bin/​ folder on the Search Heads.
    • They can be deployed via most other generally accepted” Splunk deployment methods as well – deployment server, deployer, puppet, etc…
  2. Restart Splunk!

Configure the AXL credentials.

Open Splunk and log in as an administrator.
  1. Log into Splunk
  2. Open the Supporting AXL Addon for Cisco CDR Reporting and Analytics app (SA_​cisco_​cdr_​axl).
  3. Click Update Credentials” at the top.
  4. Enter the publisher host, the port (generally 8443) and the username and password for the AXL user you created previously.
  5. Click Create to create the credentials.


Try the following to confirm everything is set up correctly:

  1. Open the Supporting AXL Addon for Cisco CDR Reporting and Analytics app.
  2. Click on our Search navigation item near the top.
  3. Paste in the following search and press enter:
    | ciscoaxl listPhone name="SEP%" columns="name,description"

If all is set up correctly, in a few moments (maybe minutes!) you should be presented with a list of all hardphones.

NOTE if your CUCM deployment is enormous you might want to filter that test down to a smaller subset of phones by changing SEP%” to something more targeted. For instance SEP0123%” will only match hardphones phones that have MAC addresses starting with 0123”.

Next Steps

The last step is to Populate the devices lookup.


Installation Notes

There are many ways to deploy, configure and update the Splunk Universal Forwarder. Here we cover a variety of the more advanced ways to handle updating the TA for Cisco CDR Reporting and Analytics.

Installation Notes