Dell Networking SONiC

Key facts

• Requires vendor product by source configuration

Links

Ref	Link
Splunk Add-on	None
Product Manual	link

Sourcetypes

sourcetype	notes
dell:sonic	None

Sourcetype and Index Configuration

key	sourcetype	index	notes
dell_sonic	dell:sonic	netops	none

Parser Configuration

1. Through sc4s-vps

   #/opt/sc4s/local/config/app-parsers/app-vps-dell_sonic.conf
   #File name provided is a suggestion it must be globally unique
   
   application app-vps-dell_sonic[sc4s-vps] {
    filter { 
           host("sonic" type(string) flags(prefix))
       }; 
       parser { 
           p_set_netsource_fields(
               vendor('dell')
               product('sonic')
           ); 
       };   
   };
   

2. or through unique port

   # /opt/sc4s/env_file 
   SC4S_LISTEN_DELL_SONIC_UDP_PORT=5005