Supporting App for AXL | Installation Notes
If you look in Splunk’s Settings > Searches, Reports and Alerts
You’ll see we ship a disabled saved search called “get_devices_example”. Here’s how to convert it to a usable search that you can schedule:
| outputlookup devices
Note this only creates the *initial* copy of the devices in the system. Continue below to have it automatically update itself nightly.
Go back to Settings > Searches, Reports and Alerts and search for the version of the report you built in the previous step. Once found:
Now that you have the Devices lookup set up and enabled, there will be a few more fields available to you for use everywhere in the app. You can read about them in our page on Using Devices. Or drop us a line and we’d be happy to hop on with you and show you around what you now have — there’s more there than may first meet the eye.
There are many ways to deploy, configure and update the Splunk Universal Forwarder. Here we cover a variety of the more advanced ways to handle updating the TA for Cisco CDR Reporting and Analytics.