Getting Data In

Cisco Firepower Estreamer Questions

sethion
Observer

Hello,

We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.

I would be grateful if you could help me to answer the questions below:

1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?
2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ?
3) Are there any issues with using one or the other method?

Thank you,
Dawid

0 Karma

ojay
Path Finder

Hi there,

what method did you end up using? Any experience that you can share?

O.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...