High Level Goal: vManage integration with SPLUNK
Goal Description: Customer needs to gather data from Cisco SD-WAN vManage into SPLUNK platform. There are many reasons why vAnalytics is not suitable and final solution. E.g. We need to collect data from more sources, not only Cisco SD-WAN and of course we would like to implement customer defined data dashboards on top of these data sources.
Technical Part of goal: We are aware about vManage REST API of vManage. But these suitable mainly for real time information. We need also historical data for complex dashboards. As far as we know vManage is storing complete data to AWS S3 bucket as data storage for vAnalytics. This “Cisco managed” S3 bucket is locked of course. Our idea/question is … Are we able to configure vManage to send data to “customer managed” S3 bucket? For example Cisco Umbrella is capable to sent logs directly to customer managed S3 as you can see on below mentioned link.
https://docs.umbrella.com/deployment-umbrella/docs/setting-up-an-amazon-s3-bucket
