Cisco Webex Add-on for Splunk

Cisco Webex Add-on for Splunk is an Add-on to pull in data from Webex REST API to Splunk.

Here are the endpoints and their mapping soucetypes.

Splunk Input	Webex Endpoint	Splunk Sourcetype
Webex Scheduled Meetings	Meetings	cisco:webex:meetings
Webex Meetings Summary Report	Meeting Usage Reports	cisco:webex:meeting:usage:reports
Webex Meetings Summary Report	Meeting Attendee Reports	cisco:webex:meeting:attendee:reports
Webex Admin Audit Events	Admin Audit Events	cisco:webex:admin:audit:events
Webex Meeting Qualities	Meeting Qualities	cisco:webex:meeting:qualities
Webex Detailed Call History	Detailed Call History	cisco:webex:call:detailed_history
Webex Security Audit Events	Security Audit Events	cisco:webex:security:audit:events

Versions Supported

• Tested for installation and basic ingestion on Splunk 9.X and 8.2 for CentOS system.

Built by Splunk's FDSE Team (#team-fdse).

Credits & Acknowledgements

• Yuan Ling
• Isaac Fonseca Monge
• Marie Duran
• Ashley Hoang
• Isaac Fonseca