Cisco eStreamer for Splunk: Why can we not get cer...

osid806 · ‎02-13-2018

In regards to the intrusion events/alerts...Currently, in our eStreamer feed, we are not getting the fields, "HTTP URL" or "HTTP Hostname." Is there a way to get those through eStreamer?

douglashurd · ‎03-28-2018

what version of the FMC are using? Are you using the following TA? https://splunkbase.splunk.com/app/3662/

Cisco eStreamer for Splunk: Why can we not get certain fields in our eStreamer feed?

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Cisco eStreamer for Splunk: Why can we not get certain fields in our eStreamer feed?

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever