Skip to content

Lookups for the Splunk Add-on for Citrix NetScaler

The Splunk Add-on for Citrix NetScaler has two lookups. The lookup files map fields from Citrix NetScaler systems to CIM-compliant values in the Splunk platform. The lookup files are located in \$SPLUNK_HOME/etc/apps/Splunk_TA_citrix-netscaler/lookups.

Filename Description
citrix_netscaler_availability_status.csv Maps state to avl_status_string, avl_status
citrix_netscaler_ha_states.csv Maps hacurstate to failover_status_string, failover_status
citrix_netscaler_icmp_code.csv Maps icmp_type to icmp_code
citrix_netscaler_appfw_category_severity_v8.2.0.csv Maps signature to category, severity