Cisco Security Suite: Are there any plans to add support for Splunk Enterprise 6.3.x or 6.4.x?

[wild0104]

Is there any ETA or plans to add support for Splunk Enterprise 6.3 or 6.4 to the Cisco Security Suite App?

Thanks.

Jacob

[wahmad_splunk · Accepted solution]

Hi Jacob,

An update to the Cisco Security Suite app (ver 3.1.2) was recently published to SplunkBase: https://splunkbase.splunk.com/app/525/

This version supports Splunk 6.3.x and 6.4.x and the latest versions of all required Add-ons (see change log in release notes ).

-Wissam

[esix_splunk]

There should be no major issues with installing this from 6.1/2 into 6.3 or 6.4.

Have you installed and are having problems?

[wild0104]

No, but I usually wait for the version I'm on to be supported before trying to install Apps or Add-ons.

[wild0104]

I have seen one issue which I could use some help or guidance on how to fix, occasionally I get where all the dashboards show "No results found", the last time I think I resolved it by rebooting all the indexers and search heads, but that's a pain. I tried rebuilding the data model for the app but that didn't resolve it, any other suggestions?

Jacob