Do I have to use Splunk Connect for Syslog with th...

ericlarsen · ‎01-29-2021

We're running v8.0.7. We ingest syslog data through a cluster of servers running rsyslog and UFs. I'm looking to install v2.6.2 of the Cisco Networks Add-on for Splunk (https://splunkbase.splunk.com/app/1467/).

Does anyone know if this TA requires the use of the Splunk Connect for Syslog app or can we use rsyslog (or syslog-ng) to accept syslog traffic?

Thanks!

richgalloway · ‎01-29-2021

No, you don't have to use SC4S.

---
If this reply helps you, Karma would be appreciated.

Do I have to use Splunk Connect for Syslog with the Cisco Networks Add-on for Splunk?

syslog

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Join the Conversation

Do I have to use Splunk Connect for Syslog with the Cisco Networks Add-on for Splunk?

syslog

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...