https://community.splunk.com/t5/All-Apps-and-Add-ons/After-installing-Cisco-Security-Suite-and-Splunk-Add-on-for/m-p/276941#M32467 <P>We noticed an error when searching, relative to an eventtype from the<BR /> cisco ESA app, it may be because the addon "Splunk Add-on for Cisco ESA"<BR /> is not installed.</P> <P>Solutions :<BR /> - install the add-on ESA, even if you do not any ESA logs<BR /> - or simply update the eventtype "cisco-esa" and remove the 3 eventtypes<BR /> missing.<BR /> (eventtype="cisco_esa_authentication" OR eventtype="cisco_esa_email" OR<BR /> eventtype="cisco_esa_proxy") see</P> Tue, 29 Sep 2020 08:09:10 GMT yannK 2020-09-29T08:09:10Z https://community.splunk.com/t5/All-Apps-and-Add-ons/After-installing-Cisco-Security-Suite-and-Splunk-Add-on-for/m-p/276940#M32466 <P>I installed the Cisco Security Suite app with the Splunk Add-on for Cisco ASA,and did the setup, but why do I see warnings about eventtype definitions for eventtype=cisco-esa?</P> Thu, 10 Dec 2015 19:01:10 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/After-installing-Cisco-Security-Suite-and-Splunk-Add-on-for/m-p/276940#M32466 yannK 2015-12-10T19:01:10Z https://community.splunk.com/t5/All-Apps-and-Add-ons/After-installing-Cisco-Security-Suite-and-Splunk-Add-on-for/m-p/276941#M32467 <P>We noticed an error when searching, relative to an eventtype from the<BR /> cisco ESA app, it may be because the addon "Splunk Add-on for Cisco ESA"<BR /> is not installed.</P> <P>Solutions :<BR /> - install the add-on ESA, even if you do not any ESA logs<BR /> - or simply update the eventtype "cisco-esa" and remove the 3 eventtypes<BR /> missing.<BR /> (eventtype="cisco_esa_authentication" OR eventtype="cisco_esa_email" OR<BR /> eventtype="cisco_esa_proxy") see</P> Tue, 29 Sep 2020 08:09:10 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/After-installing-Cisco-Security-Suite-and-Splunk-Add-on-for/m-p/276941#M32467 yannK 2020-09-29T08:09:10Z