Archive

does the Cisco ASA TA get installed on the indexer or the search head?

Contributor

Hello,
Does this TA get installed on the Indexer or the Search Head?

0 Karma
1 Solution

Motivator

Both,
This add-on provides the index-time and search-time knowledge for system log data from Cisco ASA etc..

View solution in original post

Splunk Employee
Splunk Employee

It actually would go on both, on the indexer for capture of data from universal forwarders and on search heads for field extraction.

0 Karma

Motivator

Both,
This add-on provides the index-time and search-time knowledge for system log data from Cisco ASA etc..

View solution in original post

Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!