topic Re: Cisco Security Cloud in Getting Data In

Cisco Security Cloud

FQzy — Tue, 10 Sep 2024 15:57:23 GMT

Hi guys,

Is there any documentation available out there to setup the Cisco Security Cloud app?

Specific requirements, "failed to create an input" and similar errors etc.

Qzy

Re: Cisco Security Cloud

Mitesh_Gajjar — Wed, 11 Sep 2024 07:08:59 GMT

Hi @FQzy

To set up the Cisco Security Cloud app in Splunk, you can find detailed guidance and documentation on the (https://splunkbase.splunk.com/app/7404).

### Key Steps for Setup:
1. Download and Install: You can download the Cisco Security Cloud app from Splunkbase. Make sure to follow the specific instructions for installation, which include compatibility checks and required add-ons.
2. Configure Data Inputs: The app requires the configuration of several data inputs based on your Cisco security products (e.g., Firewalls, Intrusion Protection, Web Security, etc.). The documentation provides step-by-step guidance for each type.
3. Troubleshooting Common Errors: For issues like "failed to create an input," ensure that all prerequisites (like appropriate permissions and network settings) are met. You may need to consult the app's [Splunkbase page](https://splunkbase.splunk.com/app/5558) for specific troubleshooting tips.

If you run into errors or specific issues during setup, it might also be helpful to check the community discussions and resources available on the Splunk website.

For your reference you can refer this document: https://developer.cisco.com/docs/cloud-security/cloud-security-app-for-splunk/#cloud-security-app-for-splunk

Re: Cisco Security Cloud

FQzy — Wed, 11 Sep 2024 13:33:30 GMT

Thank you Mitesh_Gajjar

Unfortunately, https://splunkbase.splunk.com/app/7404) gives this very useful information:

No information provided.

Reach out to the developer to learn more.

The link to the Cisco website is for a different App altogether, so not much further along.

(https://splunkbase.splunk.com/app/5558) is also a different app

Thanks for your efforts however!

Re: Cisco Security Cloud

PickleRick — Wed, 11 Sep 2024 13:45:32 GMT

1. @Mitesh_Gajjar 's response looks like generated with some lousy AI tool.

2. Unfortunately, the app is a third-party app so indeed your options are rather limited - either look into the app's contents and try to make sense of what's going on there or write to the email address provided in app's description trying to get more info.

Re: Cisco Security Cloud

Mitesh_Gajjar — Thu, 12 Sep 2024 05:19:33 GMT

@FQzy

You can check the _internal logs to find the specific error related to "failed to create input" in the app by using the following search query: index=_internal source=*cisco*. You can also filter the logs by setting the log level to "error." For troubleshooting any add-ons, refer to the "Troubleshoot Add-ons" document available in the Splunk Documentation. Troubleshoot add-ons - Splunk Documentation.

You can provide internal error to developer team for future investigation.

Also, @PickleRick response was not generated using any AI.

Re: Cisco Security Cloud

FQzy — Sat, 14 Sep 2024 10:36:26 GMT

Thanks Mitesh,

The "failed to create input" was because I already had one the same from previous testing!

The rest of the app is still a mystery to me, I have emailed Cisco but no reply

Thanks again FQzy

Re: Cisco Security Cloud

plao — Mon, 07 Oct 2024 20:09:45 GMT

https://www.cisco.com/c/en/us/td/docs/security/cisco-secure-cloud-app/user-guide/cisco-security-cloud-user-guide.html