I have switches, WLC and APs sending syslog to rsyslog.
Splunk is monitoring the folders and ingesting data properly (sourcetype for all 3: cisco:ios).
The IOS devices and the WLC are showing up in the overview, but not the APs.
Also, none of the detail dashboards have any info. Any idea what I might be missing?
↧