About plao

plao · ‎02-20-2025

Hi We are working on a Cisco Sec+Splunk course, using the new Cisco Security Cloud App as well as coverage for the old apps like the Cisco ISE App/Add-on. In this course, we have a troubleshooting section, so for ISE, just checking if there are any ISE logs in Splunk for troubleshooting the App/Add-On Thanks!

plao · ‎02-20-2025

plao · ‎02-20-2025

Thanks .. I only see from SNA app

plao · ‎02-20-2025

plao · ‎02-20-2025

Hi https://splunkbase.splunk.com/app/1589 https://splunkbase.splunk.com/app/1915 The app and add-on .. thanks

plao · ‎02-20-2025

Looking at the Cisco ISE App/Add_On The logging level is by default set to debug I cannot find a file which shows me debug logs for this TA? /var/log/splunk does not have any specific file for ISE and in /splunk/etc/apps/Splunk_TA as well, there is no file for logs? Thanks!

plao · ‎10-07-2024

https://www.cisco.com/c/en/us/td/docs/security/cisco-secure-cloud-app/user-guide/cisco-security-cloud-user-guide.html

plao · ‎09-21-2021

Now all of a sudden, starting around 3:19pm, I started seeing some AMP4E events in Splunk But they are coming in very slowly (not anything close to real time at all)

plao · ‎09-21-2021

Hi I was able to install and configure the AMP for Endpoints Event Inputs App for all Event Types and Groups. However, not sure why, when I do a search in Splunk, index=* sourcetype="cisco:amp:event", I can only see AMP4E events like from 8 hours ago, I am not able to see any of the recent AMP4E events

Posts	9
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎09-24-2020

Online Status	Offline
Date Last Visited	‎02-20-2025 01:13 PM

Cisco ISE App/Add-On

AMP for Endpoints Event Inputs App

Re: Cisco ISE App/Add-On

Re: Cisco ISE App/Add-On

Re: Cisco ISE App/Add-On

Re: Cisco ISE App/Add-On

Re: Cisco ISE App/Add-On

Cisco ISE App/Add-On

Re: Cisco Security Cloud

Re: AMP for Endpoints Event Inputs App

AMP for Endpoints Event Inputs App

Are you a member of the Splunk Community?