Data Source: Cisco SD-WAN NTCE 1000001

Date: 2026-03-03

ID: 350c4a45-24df-4339-ba57-8b8c09f2865f

Author: Nasreddine Bencherchali, Splunk

Description

Data source object for Cisco SD-WAN Notification Event 1000001

Details

Property	Value
Source	`/var/log/vsyslog`
Sourcetype	`cisco:sdwan:syslog`

Event Fields

+ Fields

  <span class="pill kill-chain">_time</span>
  
  <span class="pill kill-chain">_raw</span>
  
</div>

Example Log

1Feb 20 22:03:33 vSmart-01 VDAEMON_0[2571]: %Viptela-vSmart-VDAEMON_0-5-NTCE-1000001: control-connection-state-change new-state:up peer-type:vmanage peer-system-ip:1.1.1.10 public-ip:192.168.3.20 public-port:12345 domain-id:1 site-id:1005

Source: GitHub | Version: 1