Join the Conversation
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: How do I configure Cisco eStreamer eNcore for ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have two Firesights that i need to get logs from into Splunk. I have gotten esteamer working for one however I am struggling to get inputs from two separate estreamers. I have read that this can be done using the CLI version of estreamer however i don't know where to download this from. Would be greatful if someone that has done this before, could point me in the right direction. Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Got this issue sorted. Had to contact Cisco directly and get the CLI version of estreamer. We set this up on our collector for both Fsight deployments. Did the configuration and got it to work. I suggest you get in touch and they can supply you with the instruction you need as well as the CLI version. No idea why they make this such a hassle.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Got this issue sorted. Had to contact Cisco directly and get the CLI version of estreamer. We set this up on our collector for both Fsight deployments. Did the configuration and got it to work. I suggest you get in touch and they can supply you with the instruction you need as well as the CLI version. No idea why they make this such a hassle.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
were the firesight deployments working as active-passive?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
have you resolved this issue? I have same request as yours, do you have experience to share? million thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
i have the same issue
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey, sorry for the very late reply. Yeah we did. Had to contact Cisco directly and get the CLI version of estreamer. We set this up on our collector for both Fsight deployments. Did the configuration and got it to work. I suggest you get in touch and they can supply you with the instruction you need as well as the CLI version. No idea why they make this such a hassle.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Event Series: The Agentic SOC: Trust Before Autonomy
Free Professional Services for .conf26 Attendees
Defend at Machine Speed: Your Guide to Security Sessions at .conf26
