If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration.
The information in this document was created from the devices in a specific lab environment. Refer to Cisco Endpoint Security Analytics (CESA) Built on Splunk Quickstart POV Kit & Deployment Guide for more information.
Note: A collector can run on the same server. Splunk Enterprise 7.x or later (installed as all-in-one on any supported Linux platform CentOS preferred)Īny supported Linux install as a collector device The information in this document is based on these software and hardware versions:Ĭisco An圜onnect Security Mobility Client 4.7.x or laterĬisco Adaptive Security Appliance (ASA), version 9.5.2Ĭisco Adaptive Security Device Manager (ASDM), version 7.5.1 Familiarity with Splunk Enterprise and how to install Splunk apps and add-ons.Adaptive Security Device Manager (ASDM) 7.5.1 or later.Prerequisites RequirementsĬisco recommends that you have knowledge of these topics: This document describes how to install and configure the Cisco An圜onnect Network Visibility Module (NVM) on an end-user system that runs An圜onnect 4.7.x or later, and how to install and configure the associated Splunk Enterprise components and NVM Collector.
