Getting Data In

What add-on for Cisco Firepower syslog (excluding estreamer)?

ojay
Path Finder

Hi all,

I am ingesting Cisco FTD logs and currently using the Cisco ASA add-on which works fine for a lot of event messages.

Unfortunately it is not working perfect as there is one event message that is not getting recognized by the add-on.

What Splunk supported method is the best for a standardized onboarding with full CIM knowledge?

I do not want to use the estreamer as it is mostly creating issues and is not Splunk supported.

Currently used: "Splunk_TA_cisco-asa-4.2.0"

 

Best 

O.

Labels (3)
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...