Cisco eStreamer for Splunk: Why can we not get cer...

osid806 · ‎02-13-2018

In regards to the intrusion events/alerts...Currently, in our eStreamer feed, we are not getting the fields, "HTTP URL" or "HTTP Hostname." Is there a way to get those through eStreamer?

douglashurd · ‎03-28-2018

what version of the FMC are using? Are you using the following TA? https://splunkbase.splunk.com/app/3662/

Cisco eStreamer for Splunk: Why can we not get certain fields in our eStreamer feed?

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Are you a member of the Splunk Community?

Cisco eStreamer for Splunk: Why can we not get certain fields in our eStreamer feed?

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...