This is what I have done :
- created UDP input of sourcetype "syslog" for cisco device.
- installed CISCO-IOS app and TA
I am getting the following error in splunk log :
Unable to fetch datamodelreport REST endpoint '/servicesNS/admin/cisco_ios/datamodel/pivot/Cisco_IOS_Event' from 'https://127.0.0.1:8089'
Socket error while accessing servicesNS/admins/cisco_ios/datamodel/pivot/Cisco_IOS_Event: Winsock error 10053
I do agree with you that it has to do with input but don't know what/where?. even if I take out the apps from the scope and try to just ingest the data from switch I can't.
... View more