splunk for cisco router

[rborman81]

running 6.0.1.

currently capturing syslog from sonicwall firewall.

do I need a cisco add-on to capture cisco syslog data?

Thanks,
Rich

[rborman81]

I have the cisco router configured to send informational syslog via udp 514. But I'm not seeing any indexed data. by the way I'm also receiving sonicwall fw syslog on udp 514.

I have installed cisco security suite.

In the udp data input settings I don't see anything related to cisco as a source type?

[Ayn]

You don't need any particular addon to receive and index the data - Splunk will happily index whatever text you throw at it. You might however want to install relevant addons for making sense of Cisco data so you get proper fields out of events etc.