Splunk Add-on for Cisco UCS: Do you need to create the index and sourcetype for the app to function?

[pcuenco]

I can see traffic on the firewall between the 2 hosts but nothing comes up when searching the sourcetype of cisco:ucs

[kamlesh_vaghela]

@pcuenco

Can you please confirm sourcetype and index name in Configurations > Tasks??

Can you please try sourcetype=cisco:ucs:*?

https://docs.splunk.com/Documentation/AddOns/released/CiscoUCS/Configureinputs

[pcuenco]

I manually created an index (cisco) and a sourcetype (cisco:ucs) and I get 0 events when I search that string.

Cisco UCS Task:
Polling Interval: 300
Source Type: cisco:ucs
Index: cisco