What add-on for Cisco Firepower syslog (excluding ...

Getting Data In

Hi all,

I am ingesting Cisco FTD logs and currently using the Cisco ASA add-on which works fine for a lot of event messages.

Unfortunately it is not working perfect as there is one event message that is not getting recognized by the add-on.

What Splunk supported method is the best for a standardized onboarding with full CIM knowledge?

I do not want to use the estreamer as it is mostly creating issues and is not Splunk supported.

Currently used: "Splunk_TA_cisco-asa-4.2.0"

Best

Get Updates on the Splunk Community!

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

What add-on for Cisco Firepower syslog (excluding estreamer)?