topic Getting data from Cisco Firepower WITHOUT Firepower Management Console (FMC) in Getting Data In

Getting data from Cisco Firepower WITHOUT Firepower Management Console (FMC)

ari-001 — Mon, 21 Sep 2020 03:42:34 GMT

Hello,

Im a splunk newbie, we dont have FMC module. How do I send logs to Splunk without using FMC ? I only have access to Firepower Device Manager.

Re: Getting data from Cisco Firepower WITHOUT Firepower Management Console (FMC)

inventsekar — Mon, 21 Sep 2020 04:56:48 GMT

may we know if you checked the user guide:

https://www.cisco.com/c/en/us/td/docs/security/firepower/splunk/Cisco_Firepower_App_for_Splunk_User_Guide.html

https://splunkbase.splunk.com/app/4388/

(i received the 100 karma points giver badge.. have you?)

Re: Getting data from Cisco Firepower WITHOUT Firepower Management Console (FMC)

ari-001 — Mon, 21 Sep 2020 05:11:03 GMT

yes, I have looked into these docs. The main problem is that I do NOT have FMC. Is there a way that I can integrate Firepower to Splunk WITHOUT the need for FMC.