We're running v8.0.7. We ingest syslog data through a cluster of servers running rsyslog and UFs. I'm looking to install v2.6.2 of the Cisco Networks Add-on for Splunk (https://splunkbase.splunk.com/app/1467/).
Does anyone know if this TA requires the use of the Splunk Connect for Syslog app or can we use rsyslog (or syslog-ng) to accept syslog traffic?
Thanks!
No, you don't have to use SC4S.