Getting Data In

splunk for cisco router

New Member

running 6.0.1.

currently capturing syslog from sonicwall firewall.

do I need a cisco add-on to capture cisco syslog data?

Thanks,
Rich

Tags (3)
0 Karma

New Member

I have the cisco router configured to send informational syslog via udp 514. But I'm not seeing any indexed data. by the way I'm also receiving sonicwall fw syslog on udp 514.

I have installed cisco security suite.

In the udp data input settings I don't see anything related to cisco as a source type?

0 Karma

Legend

You don't need any particular addon to receive and index the data - Splunk will happily index whatever text you throw at it. You might however want to install relevant addons for making sense of Cisco data so you get proper fields out of events etc.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!