Splunk Cisco App Navigator (SCAN)

Splunk Cisco App Navigator (SCAN) is the front door to the Cisco–Splunk ecosystem. It provides a unified product catalog of 50+ Cisco products with interactive cards that show which Splunk add-ons, apps, and integrations are available for each product — along with platform compatibility, sourcetype coverage, deployment guidance, and direct links to Splunkbase and documentation. SCAN solves a persistent problem for Splunk administrators and Cisco engineers: figuring out which Cisco add-ons to install, whether they are compatible with your Splunk version and platform (Enterprise or Cloud), and how they all fit together. Instead of searching Splunkbase and cross-referencing documentation manually, SCAN puts everything in one place. Key capabilities: - Product Catalog — Browse 50+ Cisco products organized by category (Security, Networking, Observability, Collaboration). Each product card shows required add-ons, supported sourcetypes, SC4S support, and links to documentation. - Splunkbase Intelligence — A synced catalog of all Cisco-related Splunkbase apps with version history, compatibility matrices, CIM compliance, and AppInspect results. - Installation Health — Compare what's installed in your environment against the product catalog and Splunkbase to find outdated apps, missing add-ons, and deployment gaps. - Magic Eight Audit — Deep inspection of props.conf settings for any installed Cisco sourcetype, validating TIME_FORMAT, SHOULD_LINEMERGE, LINE_BREAKER, and other critical parsing settings against best practices. - Integration Guidance — Detailed modals for SC4S, NetFlow/IPFIX, Splunk Enterprise Security, SOAR, and ITSI showing exactly which add-ons are needed, how to configure them, and common pitfalls. - Customer-Ready Summaries — One-click copy of product details formatted for sharing with customers, including required apps, Splunkbase links, and recommendations. - Pre-built Reports — Ecosystem overviews, gap analysis, compatibility reports, and more. - Light and Dark Mode — Full support for both Splunk Enterprise themes. SCAN is designed for Splunk administrators, Cisco sales engineers, partner teams, and anyone who needs to navigate the Cisco–Splunk integration landscape quickly and confidently.