Splunk Cisco App Navigator (SCAN)

Splunk Cisco App Navigator (SCAN) is the front door to the Cisco–Splunk ecosystem. It provides a unified product catalog of 50+ Cisco integrations with interactive cards that show which Splunk add-ons are available for each product, along with platform compatibility, sourcetype coverage, real-time data-flow detection, deployment guidance, and direct links to Splunkbase and documentation. SCAN solves a persistent problem for Splunk administrators and Cisco engineers: figuring out which Cisco add-ons to install, whether they are compatible with your Splunk version and platform (Enterprise or Cloud), whether the data is actually flowing, and how the pieces fit together. Instead of searching Splunkbase and cross-referencing documentation manually, SCAN puts everything in one place and validates it against your live environment. The interactive catalog is organized across Security, Networking, Observability, and Collaboration with 19 subcategories. Each card shows required add-ons, sourcetype counts, integration badges for SC4S, NetFlow, Enterprise Security, SOAR, and ITSI, version intelligence, and live data-flow status — a single search validates 320 sourcetypes at once so every card knows whether data is actually arriving. Beyond the catalog, SCAN ships an Ecosystem Intelligence dashboard for portfolio analytics, Indexer Tier Detection that validates add-ons are deployed on the correct tier in clustered deployments, a Magic Eight Audit that deep-inspects props.conf parsing settings to catch ingestion problems early, context-aware integration guidance modals for SC4S, NetFlow/IPFIX, Enterprise Security, SOAR, and ITSI, and pre-built reports covering catalog analysis, sourcetype coverage, compatibility, and deployment readiness. SCAN is fully theme-aware with a three-state toggle (Light, Dark, Auto) and is designed for Splunk administrators, Cisco sales engineers, partner teams, and anyone who needs to navigate the Cisco–Splunk integration landscape quickly and confidently.