Getting Data In

Cisco Firepower Estreamer Questions

sethion
Observer

Hello,

We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.

I would be grateful if you could help me to answer the questions below:

1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?
2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ?
3) Are there any issues with using one or the other method?

Thank you,
Dawid

0 Karma

ojay
Path Finder

Hi there,

what method did you end up using? Any experience that you can share?

O.

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...