×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
christian_dinh
Loves-to-Learn Lots
Member since: ‎10-31-2020
‎11-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-31-2020
View All

Re: Cisco security suite splunk v8 distributed

by in Splunk Enterprise
‎11-03-2020 12:30 PM
‎11-03-2020 12:30 PM
I do get errors relating to Cisco Security App in the /opt/splunk/var/log/splunk/splunkd.log 11-03-2020 09:49:13.617 -0800 WARN HttpListener - Socket error from 127.0.0.1:33412 while accessing /servicesNS/-/Splunk_CiscoSecuritySuite/admin/summarization: Broken pipe 11-03-2020 10:00:46.643 -0800 WARN HttpListener - Socket error from 127.0.0.1:40300 while accessing /servicesNS/-/Splunk_CiscoSecuritySuite/admin/summarization: Broken pipe 11-03-2020 11:00:22.390 -0800 WARN HttpListener - Socket error from 127.0.0.1:44582 while accessing /servicesNS/-/Splunk_CiscoSecuritySuite/admin/summarization: Broken pipe 11-03-2020 12:00:46.430 -0800 WARN HttpListener - Socket error from 127.0.0.1:49260 while accessing /servicesNS/-/Splunk_CiscoSecuritySuite/admin/summarization: Broken pipe     ... View more

Re: Cisco security suite splunk v8 distributed

by in Splunk Enterprise
‎11-03-2020 11:58 AM
‎11-03-2020 11:58 AM
Data input into HF is udp/8515 as sourcetype=cisco::asa   HF routes to Indexers over udp:8518. ... View more

Re: Cisco security suite splunk v8 distributed

by in Splunk Enterprise
‎11-03-2020 11:56 AM
‎11-03-2020 11:56 AM
Positive that it is installed on the SH.  No errors on the dashboard, just showing “noo data found” ... View more

Cisco security suite splunk v8 distributed

by in Splunk Enterprise
‎11-03-2020 11:20 AM
‎11-03-2020 11:20 AM
Hello, I have Splunk Enterprise v8.1 in distributed cluster with 1 SH, 1 master, 2 indexers and 2 heavy forwarders.   I have Cisco security suite installed on the HF and the data visualization is displaying correctly.  I am looking for assistance to display the data in the SH.   cisco devices send logs to HF.  HF is configured to route traffic to indexers and all is working fine.  Search results showed up on SH but can’t get the Cisco security suite app to display the data.  Any help would be greatly appreciated. Thanks!   ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎11-05-2020 08:28 PM