The Splunk for IPS app has a DEPRECATION NOTICE "This app has been deprecated. The replacement Splunk 6 compatible version can be found with Splunk for Cisco Security Suite. Please refer to that app."
The Cisco Security Suite documentation only mentions ASA, WSA, ESA, and ISE. IPS is not mentioned.
The only link I can find is http://apps.splunk.com/app/528/ which is version 2.0.0 and is DEPRECATED
Where is the IPS app for the Cisco Security Suite?
IPS hasn't been updated yet to work with the new Cisco Security Suite, but it is on the list.
IPS hasn't been updated yet to work with the new Cisco Security Suite, but it is on the list.
Please get this working 🙂