Meraki App Update

[satellite-no]

Please update SC4S to use the Splunk supported meraki addon vs the developer supported addon. Specially calling out this page https://splunk.github.io/splunk-connect-for-syslog/main/sources/vendor/Cisco/cisco_meraki/.

[rjha-splunk]

@mateuszpierzchala-splunk Can you please check this.

[mstopa-splunk]

Hi @satellite-no, thank you for reporting this.

Previous SC4S Meraki parser was based on vendor product by source configuration due to its general log format.

This recent release retains previous solution for general Meraki logs, but also introduces syslog-app and almost-syslog-app parsers with sourcetypes corresponding to the official TA whenever hostname and program values enable it.

https://github.com/splunk/splunk-connect-for-syslog/blob/main/docs/sources/vendor/Cisco/cisco_meraki.md

Please let us know in case of further issues.