Splunk Add-on for Cisco ASA

The Splunk Add-on for Cisco ASA allows a Splunk software administrator to map Cisco ASA devices events to the Splunk CIM. You can then use the data with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance.

Built by Splunk LLC

Default Version 6.1.1

July 10, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 6.x

Rating

4

(18)

Log in to rate this app

Support

Splunk Supported addon

Ranking

#15

in Security, Fraud & Compliance

#16

in IT Operations

Warning

SPL2 features require Splunk 10.2+

This app can be installed, but SPL2-based features are unavailable on Splunk 10.1 and below.

The Splunk Add-on for Cisco ASA allows a Splunk software administrator to map Cisco ASA devices events to the Splunk CIM. You can then use the data with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. The Splunk Add-on for Cisco ASA 6.0.1 introduces the following changes. - TA modinput configuration fails when project name is one of JQL reserved words. Fixed: project keys that match JQL reserved words (e.g. AS) caused a parsing error in the modular input configuration.Project keys are now quoted in the generated JQL query. - Fixed When the Jira Cloud action is used from an ITSI episode an "error HTTP 400 Bad Request" is observed, and configuration works well outside ITSI environment.