Splunk Add-on for Cisco ASA

The Splunk Add-on for Cisco ASA allows a Splunk software administrator to map Cisco ASA devices events to the Splunk CIM. You can then use the data with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. The Splunk Add-on for Cisco ASA 5.2.0 introduces the following field changes. 1. Improved performance of the search-time mapping of "src" field 2. Support the latest version of Cisco ASA v9.20(2) 3. Support the newest version of CIM v5.3.2 4. Introduced a built-in dashboard to give insights of the Add-On: -Add-on version installed -Total number of Cisco ASA events ingested in Splunk -Time-series graph of the Cisco ASA events ingested in Splunk -Number of events ingested in respective of index and source -Top 10 message IDs -Trends of events by index -CIM supported events