Splunk HEC Forwarding in Security Cloud Control sends selected firewall events to Splunk over HTTPS for SIEM monitoring, log retention, compliance, and advanced security analytics. Use this feature to filter event data by device and event type, improve threat visibility, reduce noise, and support dashboards, reporting, and automated response workflows.
-
Splunk Federated Search: Search and analyze events in Cisco Security Analytics and Logging directly from Splunk Cloud Platform without ingesting the data into Splunk. Set up the connection, check its status, and troubleshoot or disconnect it from Security Cloud Control.
For more information click: Splunk Federated Search Integration with Cisco Security Analytics and Logging
Splunk Federated Search Integration with Cisco Security Analytics and Logging
Describes the integration between Splunk Federated Search and Cisco Security Analytics and Logging for searching firewall events across multiple Splunk deployments.