Cisco Security Cloud

[FQzy]

Hi guys,

Is there any documentation available out there to setup the Cisco Security Cloud app?

Specific requirements, "failed to create an input" and similar errors etc.

Qzy

[Mitesh_Gajjar]

@FQzy  

You can check the _internal logs to find the specific error related to "failed to create input" in the app by using the following search query: index=_internal source=*cisco*. You can also filter the logs by setting the log level to "error." For troubleshooting any add-ons, refer to the "Troubleshoot Add-ons" document available in the Splunk Documentation. Troubleshoot add-ons - Splunk Documentation.

You can provide internal error to developer team for future investigation.

Also, @PickleRick response was not generated using any AI. 

[FQzy]

Thanks Mitesh,

The "failed to create input" was because I already had one the same from previous testing!

The rest of the app is still a mystery to me, I have emailed Cisco but no reply

Thanks again FQzy

[Mitesh_Gajjar]

Hi @FQzy 

To set up the Cisco Security Cloud app in Splunk, you can find detailed guidance and documentation on the (https://splunkbase.splunk.com/app/7404).

### Key Steps for Setup:
1. Download and Install: You can download the Cisco Security Cloud app from Splunkbase. Make sure to follow the specific instructions for installation, which include compatibility checks and required add-ons.
2. Configure Data Inputs: The app requires the configuration of several data inputs based on your Cisco security products (e.g., Firewalls, Intrusion Protection, Web Security, etc.). The documentation provides step-by-step guidance for each type.
3. Troubleshooting Common Errors: For issues like "failed to create an input," ensure that all prerequisites (like appropriate permissions and network settings) are met. You may need to consult the app's [Splunkbase page](https://splunkbase.splunk.com/app/5558) for specific troubleshooting tips.

If you run into errors or specific issues during setup, it might also be helpful to check the community discussions and resources available on the Splunk website.

For your reference you can refer this document: https://developer.cisco.com/docs/cloud-security/cloud-security-app-for-splunk/#cloud-security-app-fo...

[FQzy]

Thank you Mitesh_Gajjar

Unfortunately, https://splunkbase.splunk.com/app/7404) gives this very useful information:

No information provided.

Reach out to the developer to learn more.

The link to the Cisco website is for a different App altogether, so not much further along.

(https://splunkbase.splunk.com/app/5558)  is also a different app

Thanks for your efforts however!

[plao]

https://www.cisco.com/c/en/us/td/docs/security/cisco-secure-cloud-app/user-guide/cisco-security-clou...

[PickleRick]

1.  @Mitesh_Gajjar 's response looks like generated with some lousy AI tool.

2. Unfortunately, the app is a third-party app so indeed your options are rather limited - either look into the app's contents and try to make sense of what's going on there or write to the email address provided in app's description trying to get more info.