Splunk Search

Splunk integration with Cisco ISE using pxGrid- How do I integrate with Splunk Trial?

mnowaczy
New Member

Hi,
I am struggling with the configuration pxGrid on Splunk for Rapid Threat Containment with ISE.
I just installed a new instance of Splunk Enterprise 8.2.6 with Cisco ISE add-on module 4.1.0. Per documentation, I should see a Setup action for the ISE add-on. But I don’t. Any ideas on what I missed?
I installed Splunk on both Ubuntu and RedHat Linux, went through everything related to certificates and got stuck when certificates need to be moved to the correct directory.
I have /opt/splunk/etc/apps/Splunk_TA_cisco-ise/ but no /opt/splunk/etc/apps/Splunk_TA_cisco-ise/bin/certs/. I am missing the bin and certs directory.
Do you know what could be causing this?

Maybe we have a step-by-step guide on how to do this integration for current versions of Splunk?
It must be some minor bug I'm making.
I'm testing it on the trial version of Splunk, but if I understand correctly the trial version has only a time limit, not a functional limit.

I would be grateful for any advice

0 Karma

Veritas
New Member

https://docs.splunk.com/Documentation/AddOns/released/CiscoISE/Releasehistory

Third-party software attributions

Version 4.1.0 of the Splunk Add-on for Cisco ISE does not incorporate any third-party software or libraries.

Third-party software attributions

Version 3.0.0 of the Splunk Add-on for Cisco ISE incorporates the following third-party software attributions:

  • pxGrid_search.jar library, provided by Cisco and used by their permission.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...