Getting Data In

Splunk_CiscoFirewalls, no data

inerdgrl
New Member

Good Day,
I first tried to use the Cisco Security Suite in anticipation of getting more Cisco devices but realized that I need another Cisco device to be able to use. I disabled the addon and download/installed Splunk_CiscoFirewalls 1.0.1 but receive this error with Splunk_CiscoFirewalls 1.0.1 - "Encountered the following error while trying to update: In handler 'localapps': Failed to create. Configuration for port 514 already exists." I deleted the admin user app Splunk_CiscoSecuritySuite but still no luck. Any ideas?
Thank you in advance,
carol

Tags (1)
0 Karma

xlack77
New Member

go to apps path /opt/splunk/etc/apps/splunk_CiscoFirewalls/local and modify the input.conf file!

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...