We have configured the Cisco Security Cloud app with a Secure Endpoint input. The input works and we are getting some data, but not all of the same data that we got through the old Cisco AMP for Endpoints add-on. In the documentation for Cisco Security Cloud, there is a (mandatory) option to select Event Types when configuring the input. And it says that you can configure multiple Event Types here. We do not see this option when setting it up on our Splunk Cloud search head. Is this a bug?
