igolz.blogg.se

At any time afterwards you can access this setup page by navigating to Manager > Apps and then clicking the Set up link for the Splunk for Cisco Firewalls add-on.Click the Setup button that appears on this listing to access the Splunk for Cisco Firewalls Setup page. When you first install the Splunk for Cisco Firewalls add-on, the add-on will be listed on the Splunk Home page.

There are two ways you can access this setup screen: You can set up inputs through the Setup screen for Splunk for Cisco Firewalls. You can do this through the UI with a setup screen, or you can set up the input manually through configuration files. To use the Splunk for Cisco Firewalls add-on, you'll first want to get it configured to listen to UDP or TCP log traffic from your Cisco firewall devices. Keep in mind that if you disable Splunk for Cisco Firewalls here, you will not receive data from it when you use the Cisco Security Suite. When you first enter the Cisco Security Suite, it will give you an opportunity to enable or disable the Splunk for Cisco Firewalls add-on. See "Getting data into the add-on," below for more information about this page. This will bring you to the Setup page for the add-on. Then restart Splunk via the CLI (using the splunk restart command) or the GUI.Īfter you restart your Splunk instance you can select the Splunk for Cisco Firewalls add-on from the Home page. When you first download the Splunk for Cisco Firewalls add-on, you'll decompress the file and place the resulting folder into either %PROGRAMFILES%\Splunk\etc\apps (if you use Windows) or $SPLUNK_HOME/etc/apps (if you use Unix/Linux). Install these products together to access reports and dashboards that give you visual insight into the performance and effectiveness of your Cisco firewall implementations. Splunk for Cisco Firewalls is designed to work in conjunction with the Splunk Cisco Security Suite app. Use the Splunk for Cisco Firewalls add-on to consume, analyze, and report on data for Cisco ASA, PIX, and FWSM firewalls.