cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
krunaldave
Explorer
Member since: ‎02-22-2023
‎03-05-2023
Community Statistics
Posts 5
Solutions 0
Karma Given 5
Karma Received 0
Member Since ‎02-22-2023
Activity Feed
View All

Re: Cisco FTD and Splunk Cloud

by in Getting Data In
‎03-05-2023 01:38 PM
‎03-05-2023 01:38 PM
Hi,  Just to summarize:   To get Cisco FTD logs into splunk cloud, install a heavy forwarder (could be a windows machine) and have the FTD send logs to it. Then have the heavy forwarder send the logs to splunk cloud. Last question would be how to get the logs into splunk cloud from the heavy forwarder since i only have  a url to log into splunk cloud and not an ip address. do we install credentials package on the HF similar as to what we would do with a UF?   Thanks, really appreciate the support.   ... View more

Re: Cisco FTD and Splunk Cloud

by in Getting Data In
‎03-05-2023 11:44 AM
‎03-05-2023 11:44 AM
@richgalloway thank you for your response. can the heavy forwarder be installed on a windows host or is the heavy forwarder a linux instance? If you have any links to documentation, I will really appreciate it. ... View more

How would I go about getting Cisco FTD into Splunk...

by in Getting Data In
‎03-05-2023 08:10 AM
‎03-05-2023 08:10 AM
Hi,   How would I go about getting cisco FTD logs into Splunk Cloud? Would I need to install a forwarder on the same network I have the FTD installed and then send those to the Splunk Cloud from the forwarder? If so, can it be a Windows Forwarder? ... View more
Labels

Splunk Universal Forwarder for Windows 9.0.4

by in Splunk Cloud Platform
‎02-22-2023 04:49 PM
‎02-22-2023 04:49 PM
Hi, I have installed Splunk Universal Forwarder for windows 9.0.4 to work with Splunk Cloud. Downloaded credential packages and saw logs in Splunk cloud. We need to send these logs to a index other than the main. Do you know how I can do this? Also, which files would need to be edited if we want to add/remove log source (right now, we only have windows security logs, but maybe we want to add windows application logs also) Can the installation of UF and these files be done via Microsoft SCCM when we need to do a mass deployment (instead of using deployment server)?   Thanks,   Krunal Dave ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎03-05-2023 03:50 PM
Karma given to
View All