topic Re: sample cisco log data with sourcetype= cisco_wsa_squid in Installation

sample cisco log data with sourcetype= cisco_wsa_squid

jcorcoran508 — Tue, 31 Aug 2021 21:05:13 GMT

Greetings:

In search of Cisco sampling logs with the sourctype=cisco_wsa_squid to sharpen my spl .

Can any one point me to a location of such log for download ?

venkatasri — Wed, 01 Sep 2021 02:11:51 GMT

is this what you are looking for ? sourcetypes are here,

if your admin allowed your role to do a index=* search you could try something like this to find the logs.

index=* sourcetype=cisco:wsa:squid*

If you aware of index just replace it.

---

An upvote would be appreciated if this reply helps!

jcorcoran508 — Wed, 01 Sep 2021 10:51:47 GMT

Thanks for the tip.

No I was actually looking for sample cisco logs to upload in my test splunk box, so I can run some SPL against it.

can you help ?

jcorcoran508 — Sun, 05 Sep 2021 13:39:35 GMT

I didn't find what I was looking for. However I found this website that offer datasets / logs