Splunk Enterprise Security

Can we setup Cisco Firepower eNcore App for Splunk on HF?


hi Team,

We are using FMC v6.* version. To integrate the logs of FirePower managemnet console can someone guide me how to setup the Firepower eNcore App for Splunk.

We have Splunk ES on Dedicated standalone SH and also we have one HF where we are DB Connect App for pulling sec data. Do we need to install the Addon on HF to pull the data? there is no clear installation document for the same. Can someone help me with the installation steps.


0 Karma


Sorry it took forever to respond. You need to install on a HF or use the CLI version. TA on the HF is best. Make sure you're using the latest version of the TA. 3.5.3.

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...