https://community.splunk.com/t5/Getting-Data-In/Cisco-Firepower-Estreamer-Questions/m-p/408191#M72371 <P>Hello,</P> <P>We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.</P> <P>I would be grateful if you could help me to answer the questions below:</P> <P>1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?<BR /> 2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ? <BR /> 3) Are there any issues with using one or the other method?</P> <P>Thank you,<BR /> Dawid</P> Wed, 05 Jun 2019 12:25:32 GMT sethion 2019-06-05T12:25:32Z https://community.splunk.com/t5/Getting-Data-In/Cisco-Firepower-Estreamer-Questions/m-p/408191#M72371 <P>Hello,</P> <P>We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.</P> <P>I would be grateful if you could help me to answer the questions below:</P> <P>1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?<BR /> 2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ? <BR /> 3) Are there any issues with using one or the other method?</P> <P>Thank you,<BR /> Dawid</P> Wed, 05 Jun 2019 12:25:32 GMT https://community.splunk.com/t5/Getting-Data-In/Cisco-Firepower-Estreamer-Questions/m-p/408191#M72371 sethion 2019-06-05T12:25:32Z https://community.splunk.com/t5/Getting-Data-In/Cisco-Firepower-Estreamer-Questions/m-p/594250#M103890 <P>Hi there,</P><P>what method did you end up using? Any experience that you can share?</P><P>O.</P> Tue, 19 Apr 2022 12:21:51 GMT https://community.splunk.com/t5/Getting-Data-In/Cisco-Firepower-Estreamer-Questions/m-p/594250#M103890 ojay 2022-04-19T12:21:51Z