Getting data from Cisco Firepower WITHOUT Firepower Management Console (FMC)

[ari-001]

Hello, 

Im a splunk newbie, we dont have FMC module. How do I send logs to Splunk without using FMC ? I only have access to Firepower Device Manager. 

[ari-001]

yes, I have looked into these docs. The main problem is that I do NOT have FMC. Is there a way that I can integrate Firepower to Splunk WITHOUT the need for FMC. 

[inventsekar]

may we know if you checked the user guide:

https://www.cisco.com/c/en/us/td/docs/security/firepower/splunk/Cisco_Firepower_App_for_Splunk_User_...

https://splunkbase.splunk.com/app/4388/

(i received the 100 karma points giver badge.. have you?)