how to configure cisco security agent to send logs to splunk
CSA sends snmp traps to udp 162. setup a src on udp 162. sourcetype has to be cisco_csa