Popular repositories Loading

1. TA-fmc-estreamer TA-fmc-estreamer Public

   Splunk add-on that collects Cisco Secure Firewall (FMC/Firepower) eStreamer events: connection, intrusion, file, malware and VPN. Managed in Splunk Web.

   Python

2. TA-absolute-secure-endpoint TA-absolute-secure-endpoint Public

   Splunk add-on for Absolute Secure Endpoint: SIEM events and device inventory from the Absolute API, with CIM mappings. Managed in Splunk Web.

   Python

3. TA-airwatch-uem TA-airwatch-uem Public

   Splunk add-on that collects Workspace ONE UEM (AirWatch) device GPS locations with each device's user and nearest city. Managed in Splunk Web.

   Python

4. TA-cisco-secure-endpoint TA-cisco-secure-endpoint Public

   Splunk add-on for Cisco Secure Endpoint (AMP): events, audit logs, computers and vulnerabilities from the API, with CIM mappings.

   Python

5. TA-ftd-asa-syslog-extractions TA-ftd-asa-syslog-extractions Public

   Splunk field extractions for Cisco FTD and ASA syslog message IDs (cisco:asa) that the Cisco ASA add-on and Cisco Security Cloud don't extract.

   Python

6. TA-fmc-syslog-audit TA-fmc-syslog-audit Public

   Splunk CIM add-on for Cisco Secure Firewall Management Center (FMC) audit log and correlation syslog: Authentication, Change, Alerts.

   Python