cisco_dnac_networkhealth collect issue

[lcharran]

Hi

I installed and configured your APP and Add On for DNAC.
All is working well except the collect for cisco_dnac_networkhealth
I got some informations regarding this sourcetype the first time I launch the collect and since this time I didn't receive any information for networkhealth
I enable loglevel = DEBUG, see lot of logs in the log file splunk_ta_cisco_dnacenter_cisco_dnac_networkhealth.log but there is no error/no warning, all seems to be ok but I don't see corresponding data in my index

Do you have any idea of what happened ?
thanks in advance
regards

[wastorga]

Hi, @lcharran.

To provide you with better help, please bring me the following information.

• What is your Splunk version (Enterprise or Cloud)
• What is the Splunk platform version
• Is your Splunk server able to reach your Cisco DNA Center?
• And the result of running the query index="_internal" | where event_message LIKE "%Splunk-TA-cisco-dnacenter%" | search log_level!=INFO. Do you see any errors/warnings there?
• Or even more directly with index="_internal" | where event_message LIKE "%Splunk-TA-cisco-dnacenter/bin/cisco_dnac_networkhealth%" | search log_level=ERROR

If you want, you can continue the conversation through email to cisco-en-programmability@cisco.com and wastorga@cloverhound.com.

[lcharran]

Hi Wastorga
thanks a lot for your message
I will send you an email with my answer
regards