All Apps and Add-ons

After I install the Splunk Add-on for Cisco ASA, why does the setup button not appear?

kiarashbarzoode
New Member

Hello

After I upload the Splunk Add-on for Cisco ASA, the setup button does not appear.
I checked both version Windows and Linux and also downloaded the add-on again.
How can I fix this problem?

0 Karma

ryanoconnor
Builder

I don't believe the Cisco ASA add-on has any sort of setup page. What exactly are you trying to do? Have you taken a look at the documentation for that add-on?

http://docs.splunk.com/Documentation/AddOns/latest/CiscoASA/Description

0 Karma

kiarashbarzoode
New Member

so how config splunk to use cisco ASA logs?

0 Karma

ryanoconnor
Builder

In order to ingest Cisco ASA logs you'll want to start by sending data via syslog from your Cisco devices. This section of the document covers it but may be a little vague if you've never configured Splunk to receive syslog before, or configured a syslog receiver such as syslog-ng.

http://docs.splunk.com/Documentation/AddOns/latest/CiscoASA/Inputs

I would consider reviewing the below documents if you've never done this before.

http://wiki.splunk.com/Community:Best_Practice_For_Configuring_Syslog_Input
http://www.function1.com/2012/05/syslog-collection-with-splunk

Essentially you'll either setup a syslog receiver such as syslog-ng to drop the syslog events into a file. Then Splunk can monitor the file and place it in the proper sourcetype defined here:

http://docs.splunk.com/Documentation/AddOns/latest/CiscoASA/DataTypes

You can also configure Splunk to accept the input directly, but best practices suggest you use syslog-ng.

Let me know if you have any other questions.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...