Webex Calling and Webex Meetings

NOTE: If you’re looking for information about Webex DI (aka ​“Dedicated Instance”), you don’t need anything on this page and you should return to our normal setup steps for onprem CUCM. Contact us with any questions.

For Webex Calling and Webex Meetings — at a high level there are three apps you’ll install into Splunk.

1) Cisco’s official TA — for ingestion.

Splunk and Cisco have created a free Splunk app that provides a reliable documented mechanism to pull your CDR in today from Webex Calling and Webex meetings. 

Download the latest release as a tar.gz from their releases page and follow their setup documentation on github, 

It’s not a particularly difficult set of steps to follow, but.… it’s an unsupported app so it’s documentation may feel a little rough. Feel free to reach out to us at Sideview if you have any questions or need some advice. 

The only deviation from their docs that you need to make, is that just before you turn on the solution and start pulling live data in, install Sideview’s ​“Supporting App for Webex” alongside their TA and restart. There are just a few index-time improvements that we need to add on top. 

2) Sideview’s ​“Supporting App for Webex” — a small adapter app. 

This is a small but important app that adapts the ingested data so that users can drive around in it using Sideview’s Cisco CDR Reporting and Analytics app. 

This app is available on Splunkbase.

It needs to be installed BOTH on 
a) the same Splunk instance that has the TA, 
b) AND also on the Search Head tier (alongside #3 below). 

(NOTE If you are setting up a completely standalone single Splunk server to do everything , a and b will be the same server so you only need one copy of the app installed)

3) Sideview’s ​“Cisco CDR Reporting and Analytics” app — the full investigation and reporting interface.

If you haven’t already, install and set up our main commercial app following these steps. Note this app is a paid commercial app, available as a free 60 day trial. 

The fun part — driving around in your data.

Once you have our ​“Supporting App for Webex” installed and the Cisco TA has started pulling in your data,

• Log into the Cisco CDR Reporting and Analytics app
• Navigate to ​“Admin > enable/​disable data types”.
• Enable the ​“Webex” data type and submit
• Navigate to ​“Investigate > Calls”.
• Note that a new pulldown will appear labeled ​“through”. This will allow you to to choose whether to analyze CUCM CDR, or Webex CDR or both.

At this point contact us to set up a discussion over webex, if you haven’t already.