All Apps and Add-ons

Cisco Security Suite App and cisco network switches

Michael0
New Member

I´ve downloaded the Cisco Security Suite App and installed it.

I also have ~ 15 cisco network switches added to syslog into splunk.

I can see the network switches and the logs at the splunk GUI.

How can I connect the network switches the cisco security suite app to show me some data and statistics?

Thank you for any hint!

Tags (1)
0 Karma
1 Solution

jconger
Splunk Employee
Splunk Employee

The Cisco Security Suite is designed to give visualizations and statistics to Cisco ASA and PIX firewall appliances, the FWSM firewall services module and the WSA web security appliance. Cisco Identity Services Engine (ISE) will be integrated next. So, there is not anything in the suite for network switches alone.

Since you are seeing data in Splunk from syslog, you can use Splunk to search and report on your data. Check out the Search manual here - http://docs.splunk.com/Documentation/Splunk/latest/Search/Whatsinthismanual

Also, check out the search quick reference PDF - http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

View solution in original post

0 Karma

jconger
Splunk Employee
Splunk Employee

The Cisco Security Suite is designed to give visualizations and statistics to Cisco ASA and PIX firewall appliances, the FWSM firewall services module and the WSA web security appliance. Cisco Identity Services Engine (ISE) will be integrated next. So, there is not anything in the suite for network switches alone.

Since you are seeing data in Splunk from syslog, you can use Splunk to search and report on your data. Check out the Search manual here - http://docs.splunk.com/Documentation/Splunk/latest/Search/Whatsinthismanual

Also, check out the search quick reference PDF - http://www.splunk.com/web_assets/pdfs/secure/Splunk_Quick_Reference_Guide.pdf

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...