Hello,
I have DL'd and installed the following:
Splunk App for Cisco ASA ver 1.0 Splunk for Cisco ASA Technology Add-on ver 1.1 Google Maps Sideview Utils
- My Splunk server is receiving SYSLOG from my ASA ( verified with TCP Dump )
- I can use a * to search the logfiles
- I have updated my input.conf = sourcetype=cisco:asa, index: main
I still am showing no data in the following:
- Fiewall Dashboard Page
- Overview Page
- Summary Page
Any help much appreciated.
Thanks, Brian