Skip to content
Home » Unlock Unified Network and Security Analytics with Cisco and Splunk

Unlock Unified Network and Security Analytics with Cisco and Splunk


As we continue our video series — NetGru: Month of Networking — we’ll show you how to unlock unified network and security analytics with the Cisco Enterprise Networking app for Splunk.

Hosted by Principal Engineer Adrian Iliesiu, this weekly livestream lets you see demos, ask questions live, and hear from the people building Cisco automation tools.

In episode 2, Technical Marketing Engineer Taylor Cook shows how this technical add-on for the Splunk platform brings together visibility into network health, security posture, and user identity, all through a single pane of glass.

Join us live September 17, 9 a.m. U.S. Pacific, 12 p.m. U.S. Eastern, 16:00 UTC

New episodes stream every Wednesday on the Cisco DevNet YouTube channel:

https://www.youtube.com/@CiscoDevNetchannel

Unlock Unified Network and Security Analytics with Cisco and Splunk

In the upcoming session, Technical Marketing Engineer Taylor Cook will show how the Cisco Enterprise Networking app for Splunk unifies data across Catalyst Center, Identity Services Engine (ISE), SD-WAN, and CyberVision. With integrated dashboards and APIs, you’ll see how to monitor network health, detect threats, and correlate user activity—all through one interface. Bring your questions to ask live.

Key Integrations and Features

Cisco Catalyst Center Integration

  • Unified Data Collection: Collect inventory, assurance data, and event notifications from Catalyst Center clusters using REST APIs, webhooks, and syslog.
  • Rich Dashboards: View client, device, and network health, track compliance, and build dashboards with custom searches.
  • Enriched Context: Add context to Catalyst Center logs and trends using data from API integrations.

Cisco Identity Services Engine (ISE) Integration

  • Endpoint and Policy Activity: View endpoint data and monitor trends across authentication and authorization policies.
  • Enriched Context: Add intelligence to ISE logs through API integration.
  • SGT Deployment and Usage: Analyze how Security Group Tags (SGTs) are configured, deployed, and enforced across ISE and related platforms.

Cisco SD-WAN Integration

  • Security and Connection Logs: Access logs for URL activity, malicious file detection, and firewall events.
  • Prepopulated Dashboards: Get actionable views of security events, device-level data, and traffic patterns.
  • Site Tunnel Metrics: Monitor tunnel health and performance to troubleshoot issues faster.

Cisco CyberVision Integration

  • Network Security Visibility: See detailed traffic flows from IoT and OT devices and identify top talkers in your industrial network.
  • Highlight Vulnerabilities: View your top risks with CyberVision’s analysis and follow detailed remediation steps.

Developer Use Cases and Benefits

  • Customizable and Extensible: Use Splunk’s open platform and existing apps to tailor dashboards, alerts, and data inputs.
  • Unified Security Operations: Correlate data across platforms to detect, investigate, and respond to threats more quickly.
  • Automation Ready: Automate data collection, incident creation, and remediation with Splunk APIs and scripts.
  • Multi-Platform Correlation: Combine telemetry from Catalyst Center, ISE, SD-WAN, and CyberVision for end-to-end network and security insights.

Get Ready for the Livestream

Want to follow along with Taylor’s demo? Set up the Cisco Enterprise Networking app for Splunk ahead of time:

  1. Install the app from Splunkbase: https://splunkbase.splunk.com/app/7539
  2. Configure credentials, REST API connections, and syslog inputs for your Cisco platforms.
  3. Explore the prebuilt dashboards to see network health, compliance, and security insights.

 

This integration gives developers, network engineers, and SOC teams a single, powerful interface for analytics and response. You get visibility, automation, and faster decision-making.

 

What’s Next on NetGru: Month of Networking

Each week, we bring on a new guest with hands-on demos and real-world answers. Don’t miss these upcoming sessions:

 

 

Join us live to ask questions and see what’s next in Cisco networking.

Watch, Learn, and Subscribe

Catch the replay, then subscribe to the Cisco DevNet YouTube channel so you never miss a session:
https://www.youtube.com/@CiscoDevNetchannel

NetGru: Month of Networking is well underway. Start your learning journey today.

Share: