Getting Data In

Cisco Firepower Estreamer Questions

sethion
Observer

Hello,

We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input.

I would be grateful if you could help me to answer the questions below:

1) Is it possible to connect 1 heavy forwarder to more than 1 FMC?
2) Is there a difference in what kind of data we can receive ( ex. is syslog able to send ips data, and estreamer firewall data?) ?
3) Are there any issues with using one or the other method?

Thank you,
Dawid

0 Karma

ojay
Path Finder

Hi there,

what method did you end up using? Any experience that you can share?

O.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...