Szymon Bylica
Szymon Bylica
Updated the pr
I've added a task to our backlog
@hatem2018 do you have a support case for this? Can you share it?
Looks like this bug may be caused by new message types introduced by FTD: https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs4.html#id_87690 It will probably require changes to app-cisco-cisco_asa.conf and app-cisco-cisco_ftd.conf, we'll discuss this and get back...
Just FYI we have implemented changes that address this issue, they should be a part of the next release
Hi @techsystems-unix, any updates on this?
Wouldn't it make more sense to create a custom filter and extract it in SC4S? Alternatively we could try changing hec endpoint in values: charts/splunk-connect-for-syslog/values.yaml
@yoann-ls any updates to this case?
Implemented changes necessary for this here: https://github.com/splunk/splunk-connect-for-syslog/pull/2818 It should be a part of our next release.