Arista Networks Telemetry For Splunk
Overview
Details
The Splunk application and EOS extensions are easy to deploy on all Arista Networks switches and leverage Arista's Extensible Operating System (EOS™) The EOS extension exports real time data from each switch to the Splunk server application.
The application provides pre-built dashboards, views, searches and add-ons for visualizing network telemetry data from Arista switches including:
- Interface counters and statistics
- System logging data (syslog)
- Switch health and inventory data
- Power consumption
- Optical light levels
- Hardware table status
- Latency Analyzer data (LANZ)
- sFlow
.. as well as custom user defined data types
For more details and documentation please go to
http://www.arista.com/en/products/eos/splunkapp
Contact splunk@arista.com to find out how to get the EOS Telemetry and CLI For Splunk extensions for EOS. A login is required to Arista.com software downloads (register) and a Telemetry App for Splunk license is available from your account team.
Release Notes
Version 1.5
Bug Fixes:
* Missing LANZ device list of index inventory is not enabled
* Reporting correct Time-Of-Max-Queue using start_time of the congestion record.
Updates:
Manual creation of indexes needed for the app in accordance with Splunk app certification process
Install:
1. First time install starting AristaAppForSplunkDashboard-1.5.spl go to next step, else if upgrading from 1.4 , restart Splunk sever from Settings -> Server controls
2. Create 'arista' index( if it does not exists) in Settings-> Indexes-> New Index with following settings,
homePath = $SPLUNK_DB/arista/db
coldPath = $SPLUNK_DB/arista/colddb
thawedPath = $SPLUNK_DB/arista/thaweddb
data integrity check = enabled
Max size of entire index = 500000 MB
Max size of hot/warm/cold bucket = auto MB
Frozen Path= optional
Tsidx Retention Policy = Enable ReductEnable reduction
Reduce tsidx files older than = 7 days
3. Configure receiving port( if it does not exists) from Settings-> Forwarding and receiving -> Configure Receiving -> Add new
Version 1.4
* Deprecated Topology Graph View
Version 1.3
* This release is intended for use with Arista Telemetry App for Splunk Release 1.2.0
* Additional dashboard elements for sFlow: sFlow sample view and Global IP view
Version 1.2
* This release is intended for use with Arista Telemetry App for Splunk Release 1.1.1 and 1.1.2
Version 1.1.1
Minor view enhancements.