Latest Version 3.2.37
July 10, 2026
Cisco Catalyst Add-on for Splunk
Cisco Catalyst Add-on for Splunk collects and normalizes API telemetry from Cisco Catalyst Center, SD-WAN (vManage), ISE, and Cyber Vision through modular inputs. It includes CIM-aligned knowledge objects, backward-compatible DNAC/Catalyst sourcetype coverage, and built-in health monitoring for input status, errors, and API load.
Built by Cisco
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4
CIM Version: 8.x, 6.x
Rating
2
(5)
Log in to rate this app
Support
Cisco Supported addon
Ranking
#2
in Network Access Control
#23
in Network Security
Author - Cisco Systems
Prerequisites - This Technical Add-on is dependent on 'Splunk Add-on for Stream Forwarders' and 'Splunk App for Stream'
Supported Cisco Products:
Cisco Catalyst SD-WAN
Cisco Identity Services Engine
Cisco Catalyst Center
Cyber Vision
Cisco Network Infrastructure Devices which include the below platform series:
* Cisco Catalyst series switches (1000, 1200, 1300, 2960, 3650, 3750, 4500, 6500, 6800, 7600, 9000 etc.)
* Cisco ASR - Aggregation Services Routers (900, 1000, 5000, 9000 etc.)
* Cisco ISR - Integrated Services Routers (800, 1900, 2900, 3900, 4451 etc.)
* Cisco Nexus Data Center switches (1000V, 2000, 3000, 4000, 5000, 6000, 7000, 9000 etc.)
* Cisco Carrier Routing System
* Other Cisco IOS based devices (Metro Ethernet, Industrial Ethernet, Blade Switches, Connected Grid etc.)
* Cisco Access Points
* Cisco WLC - WLAN Controller
Categories
Network Access Control, Network Security
Created By
Cisco
Type
addon
Downloads
6,573
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing