HI
Can i setup Splunk for continues traffic capture from cisco switch , i need to collect capture network traffic for 30 day period ,Any article's or step's on how to do that.
thanks
Can i setup Splunk for continues traffic capture from Cisco switch /// Yes, Sure you can setup.
i need to collect capture network traffic for 30 day period // yes, its possible, its simple.
Any article's or step's on how to do that /// this is a big and long task. you have to plan this step by step.
1. first you should collect logs from cisco switch (you can search for this. search for "splunk, cisco switch syslog").
2. once data/logs reached splunk indexer, you can create, for 30 days reports/alerts/dashboards, etc.
if you ask a specific question, we can troublehsoot that and move forward, one step at a time.
Best Regards,
Sekar
PS - Karma points appreciated!