splunk
Splunk Add-on for Cisco WSA
Splunk Cloud
Splunk Built
Overview
Details
The Splunk Add-on for Cisco WSA allows a Splunk software administrator to collect access and L4TM log data from Cisco Web Security Appliances (WSA) (formerly known as IronPort AsyncOS for Web). You can analyze these logs directly or use them as a contextual data source to correlate with other communication and authentication data in the Splunk platform. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.
Documentation for this add-on is posted at Splunk Docs.
Release Notes
Version 4.0.0
Aug. 9, 2022