Data Source: Cisco SD-WAN Service Proxy Access Logs

Date: 2026-03-09

ID: 350c5a45-24df-4339-ba57-8b8c09f2865f

Author: Nasreddine Bencherchali, Splunk

Description

Data source object for Cisco SD-WAN Service Proxy Access Logs

Details

Property	Value
Source	`/var/log/nms/containers/service-proxy/serviceproxy-access.log`
Sourcetype	`cisco:sdwan:access`

Event Fields

+ Fields

  <span class="pill kill-chain">_time</span>
  
  <span class="pill kill-chain">_raw</span>
  
</div>

Example Log

1[2026-03-04T18:28:05.057Z] "GET /reports/data/opt/data/containers/config/data-collection-agent/.dca HTTP/1.1" 200 - 0 32 4 - "172.16.1.1" "python-requests/2.31.0" "feffbfff-7224-43e0-9115-cadf13d2fefa" "172.16.0.1:8443" "127.0.0.1:8080"

Source: GitHub | Version: 1