Getting Data In

Cisco Firepower Estreamer Questions

sethion
Observer

Hello,

We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.

I would be grateful if you could help me to answer the questions below:

1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?
2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ?
3) Are there any issues with using one or the other method?

Thank you,
Dawid

0 Karma

ojay
Path Finder

Hi there,

what method did you end up using? Any experience that you can share?

O.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...