Do I have to use Splunk Connect for Syslog with th...

ericlarsen · ‎01-29-2021

We're running v8.0.7. We ingest syslog data through a cluster of servers running rsyslog and UFs. I'm looking to install v2.6.2 of the Cisco Networks Add-on for Splunk (https://splunkbase.splunk.com/app/1467/).

Does anyone know if this TA requires the use of the Splunk Connect for Syslog app or can we use rsyslog (or syslog-ng) to accept syslog traffic?

Thanks!

richgalloway · ‎01-29-2021

No, you don't have to use SC4S.

---
If this reply helps you, Karma would be appreciated.

Do I have to use Splunk Connect for Syslog with the Cisco Networks Add-on for Splunk?

syslog

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Join the Conversation