About tmardan

tmardan · ‎11-14-2020

Hello! I'm trying to collect logs from Cisco ASA devices through Heavy Forwarder, I'm sending all Cisco ASA logs to my HF instance and then send them to indexers. I want to parse these logs and send to indexers only VPN-event logs. How can I filter them? Can I filter them using event types from Cisco Add-on?

tmardan · ‎09-18-2020

As I understood at this moment I can use for it universal forwarder too?

tmardan · ‎09-17-2020

Thank you for answer! You mean deploy heavy forwarder on another machine and configure it to receive logs from Office365 and then send them to my indexers?

tmardan · ‎09-17-2020

Hello! How can I add Office 365 logs to my Splunk if I have 1 search head and 2 indexers and using distributed search? Should I install all add-ons on 1 indexer and make all configurations on it and all add-ons and app on search head?

Posts	4
Solutions	0
Karma Given	3
Karma Received	1
Member Since	‎09-12-2020

Online Status	Offline
Date Last Visited	‎09-20-2021 04:26 AM

Cisco logs though Heavy Forwarder

Office 365 logs

Cisco logs though Heavy Forwarder

Re: Office 365 logs

Re: Office 365 logs

Office 365 logs