Cisco Cisco Content Delivery System Manager Installation Guide

disabled = false

host_regex = _(\d+\.\d+\.\d+\.\d+)

sourcetype = fms_other

index = cdn_transaction

crcSalt = <SOURCE>

[monitor:///local/local1/logs/webengine_clf/we_accesslog_clf_*]

# web engine transaction

disabled = false

host_regex = _(\d+\.\d+\.\d+\.\d+)

sourcetype = we_access

index = cdn_transaction

crcSalt = <SOURCE>

[monitor:///local/local1/logs/webengine_abr/we_accesslog_abr_*]

# ABR Session

disabled = false

host_regex = _(\d+\.\d+\.\d+\.\d+)

sourcetype = abr_session

index = cdn_transaction

crcSalt = <SOURCE>

[monitor:///local/local1/logs/sedc/se_ds_counter_*]

# SE Active counter

disabled = false

host_regex = _(\d+\.\d+\.\d+\.\d+)

sourcetype = ses

index = cdn_snapshot

crcSalt = <SOURCE>

Change to the Splunk_Home>/bin directory and restart Splunk using the following command:

./splunk restart

Validate the configuration by checking the <Splunk_Home>/var/log/splunk/splunkd.log for the following output:

TcpOutputProc - Connected to idx=<Analytics Fowarder IP>:9998

Configure CDS-IS.

To configure the CDS-IS transaction log settings, first configure the SE log and then the SR log.

To configure the SE/SR logs, complete the following:

Log into CDSM and then navigate to Device > Select a SE and Edit > Service Control > Transaction
Logging, a screen similar to the following is displayed.