Splunk TA Overview
The IP Fabric Splunk TA offers a potent solution for comprehensive network monitoring and analysis. By utilizing the official IP Fabric app, organizations can seamlessly merge IP Fabric’s advanced network visibility capabilities with Splunk’s robust data collection and analysis functionalities. This collaboration empowers teams to swiftly identify and troubleshoot network issues, proactively enhance security measures, and gain valuable insights from the amalgamation of IP Fabric’s network data and Splunk’s powerful analytics platform.
Installing the Add-on
Splunkbase
The IP Fabric Splunk TA is available on Splunkbase here.
Installing Via the Splunk Web Interface
- log in to Splunk and navigate to the Apps menu.
- click the Browse more apps button or the Find more apps link.
- search for IP Fabric.
- click the Install button.
Manual Installation
- download the IP Fabric Splunk TA from here.
- log in to Splunk and navigate to the Apps menu.
- click the Manage Apps button.
- click the Install app from file button.
- select the IP Fabric Splunk TA file and click Upload.
- restart Splunk.
Configuring the Add-on
Setting Up IP Fabric API Token
- log in to IP Fabric and navigate to Settings > Integrations > API Tokens.
- click the Create API Token button.
- enter a name for the token and click Create.
- copy the token and save it in a secure location.
- log in to Splunk and navigate to the IP Fabric TA.
- click the Configuration tab.
- paste the token into the API Token field.
- click Save.
Capturing Events
Configuring the IP Fabric app
- log in to Splunk and navigate to the IP Fabric app.
- click the Inputs tab.
- click the Create New Input button.
- enter a name for the input.
- enter an Interval for the input.
- enter an Index for the input.
- enter the URL for the IP Fabric instance.
Capturing Intent Checks
Capturing Table Data
- Follow the steps above to configure the app.
- Select either ‘Inventory’ or ‘Technology’ from the Table dropdown.
- enter a table path in the Table Path field.
- add optional filters in the Filter field.
- press save/update.
Using the Add-on
Search an Index loaded with IP Fabric Data
Using the search bar, you can search for any data that has been loaded into the index. You can start correlating data in
other splunk indexes with IP Fabric data.