Getting Data In

Splunk_CiscoFirewalls, no data

inerdgrl
New Member

Good Day,
I first tried to use the Cisco Security Suite in anticipation of getting more Cisco devices but realized that I need another Cisco device to be able to use. I disabled the addon and download/installed Splunk_CiscoFirewalls 1.0.1 but receive this error with Splunk_CiscoFirewalls 1.0.1 - "Encountered the following error while trying to update: In handler 'localapps': Failed to create. Configuration for port 514 already exists." I deleted the admin user app Splunk_CiscoSecuritySuite but still no luck. Any ideas?
Thank you in advance,
carol

Tags (1)
0 Karma

xlack77
New Member

go to apps path /opt/splunk/etc/apps/splunk_CiscoFirewalls/local and modify the input.conf file!

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...