Hello,
what you probably want is an EEM script such as the one below. You can install this script:
switch(config)#
then run it manually by typing:
switch#event manager run IP
The output is still rather unformatted, I am working on the correct output format. This output then can be sent to your Splunk.
event manager applet IP
event none
action 010 cli command "enable"
action 011 set var 0
action 012 cli command "show ip dhcp binding | include Automatic"
action 013 foreach line "$_cli_result"
action 014 regexp "([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)" "$line" ip
action 015 if $_regexp_result eq "1"
action 016 increment var
action 017 puts "IP/MAC$var $ip"
action 018 end
action 019 end
