Collect Syslog data using Splunk Connect for Syslog
Avoid configuring Splunk to listen for syslog messages directly. Instead, you can collect Syslog data using Splunk Connect for Syslog (SC4S). To configure your deployment to use SC4S to collect Syslog data, follow the steps described in the Splunk Connect for Syslog manual.
Configure monitor inputs for the Splunk Add-on for Cisco ESA
Lookups for the Splunk Add-on for Cisco ESA
This documentation applies to the following versions of Splunk® Supported Add-ons: released