Lookups for the Splunk Add-on for Citrix NetScaler¶
The Splunk Add-on for Citrix NetScaler has two lookups. The lookup files map fields from Citrix NetScaler systems to CIM-compliant values in the Splunk platform. The lookup files are located in \$SPLUNK_HOME/etc/apps/Splunk_TA_citrix-netscaler/lookups.
| Filename | Description |
|---|---|
citrix_netscaler_availability_status.csv |
Maps state to avl_status_string, avl_status |
citrix_netscaler_ha_states.csv |
Maps hacurstate to failover_status_string, failover_status |
citrix_netscaler_icmp_code.csv |
Maps icmp_type to icmp_code |
citrix_netscaler_appfw_category_severity_v8.2.0.csv |
Maps signature to category, severity |