splunk
Splunk Add-on for Cisco ASA
Splunk Cloud
Splunk Built
Overview
Details
The Splunk Add-on for Cisco ASA allows a Splunk software administrator to map Cisco ASA devices events to the Splunk CIM. You can then use the data with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.
The Splunk Add-on for Cisco ASA 5.2.0 introduces the following field changes.
1. Improved performance of the search-time mapping of "src" field
2. Support the latest version of Cisco ASA v9.20(2)
3. Support the newest version of CIM v5.3.2
4. Introduced a built-in dashboard to give insights of the Add-On:
-Add-on version installed
-Total number of Cisco ASA events ingested in Splunk
-Time-series graph of the Cisco ASA events ingested in Splunk
-Number of events ingested in respective of index and source
-Top 10 message IDs
-Trends of events by index
-CIM supported events
The Splunk Add-on for Cisco ASA 5.2.0 introduces the following field changes.
1. Improved performance of the search-time mapping of "src" field
2. Support the latest version of Cisco ASA v9.20(2)
3. Support the newest version of CIM v5.3.2
4. Introduced a built-in dashboard to give insights of the Add-On:
-Add-on version installed
-Total number of Cisco ASA events ingested in Splunk
-Time-series graph of the Cisco ASA events ingested in Splunk
-Number of events ingested in respective of index and source
-Top 10 message IDs
-Trends of events by index
-CIM supported events
The Splunk Add-on for Cisco ASA allows a Splunk software administrator to map Cisco ASA devices events to the Splunk CIM. You can then use the data with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.
Documentation for this add-on is posted at Splunk Docs.
Release Notes
Version 5.2.0
May 29, 2024
Version 5.1.1
Aug. 29, 2023
v5.1.1:
Improved performance of the search-time mapping of "src" field