Splunk for Cisco Identity Services (ISE)

Cisco Identity Services Engine (ISE) is a security policy management and control platform. It automates and simplifies access control and security compliance for wired, wireless, and VPN connectivity. The Splunk for Cisco ISE add-on allows for the extraction and indexing of the ISE AAA Audit, Accounting, Posture, Client Provisioning Audit and Profiler events. This integration allows any Splunk user to correlate ISE data with other data sources (e.g. with firewall events or application data) to get deeper operational and security visibility. It also includes sample dashboards and reports for profiling, authentication, system statistics, alarms, and location awareness. For installation instructions, see the README file within the default directory.