I´ve downloaded the Cisco Security Suite App and installed it.
I also have ~ 15 cisco network switches added to syslog into splunk.
I can see the network switches and the logs at the splunk GUI.
How can I connect the network switches the cisco security suite app to show me some data and statistics?
Thank you for any hint!
The Cisco Security Suite is designed to give visualizations and statistics to Cisco ASA and PIX firewall appliances, the FWSM firewall services module and the WSA web security appliance. Cisco Identity Services Engine (ISE) will be integrated next. So, there is not anything in the suite for network switches alone.
Since you are seeing data in Splunk from syslog, you can use Splunk to search and report on your data. Check out the Search manual here - http://docs.splunk.com/Documentation/Splunk/latest/Search/Whatsinthismanual
Also, check out the search quick reference PDF - http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf
The Cisco Security Suite is designed to give visualizations and statistics to Cisco ASA and PIX firewall appliances, the FWSM firewall services module and the WSA web security appliance. Cisco Identity Services Engine (ISE) will be integrated next. So, there is not anything in the suite for network switches alone.
Since you are seeing data in Splunk from syslog, you can use Splunk to search and report on your data. Check out the Search manual here - http://docs.splunk.com/Documentation/Splunk/latest/Search/Whatsinthismanual
Also, check out the search quick reference PDF - http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf