Upgrade the Splunk Add-on for Cisco ASA
Upgrade from version 3.4.0 to version 4.0.0 or later of the Splunk Add-on for Cisco ASA.
Lookups files in version 3.4.0 and later, and in the case of the SSAI upgrade, lookups are not updating with the latest values. To mitigate this, you must manually update the lookup files as per the latest version in the Splunk_TA_cisco-asa/lookups directory.
Install the Splunk Add-on for Cisco ASA in a single-instance Splunk Enterprise deployment
Configure inputs for the Splunk Add-on for Cisco ASA
This documentation applies to the following versions of Splunk® Supported Add-ons: released