Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
CCX Add-on for Cisco Meraki app icon

CCX Add-on for Cisco Meraki

About Us: CyberCX is Australia's greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Add-on for Cisco Meraki looks to provide a single field extraction bundle for Cisco Meraki logs. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Cisco Meraki. Currently this add-on provides additional field extraction and CIM compliance for the following sourcetypes: - ccx:meraki:sc4s - ccx:meraki:sc4s:events - ccx:meraki:sc4s:firewall - ccx:meraki:sc4s:flows - ccx:meraki:sc4s:urls - meraki:accesspoints - meraki:audit - meraki:cameras - meraki:organizationsecurity - meraki:securityappliances - meraki:switches Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alert, Change, IDS, Malware, Network Traffic, Network Sessions, and Web.

Built by Matthew Orme
splunk product badge

Compatibility
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1
CIM Version: 5.x
Rating

0

(0)

Log in to rate this app
About Us: CyberCX is Australia's greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Add-on for Cisco Meraki looks to provide a single field extraction bundle for Cisco Meraki logs. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Cisco Meraki. Currently this add-on provides additional field extraction and CIM compliance for the following sourcetypes: - ccx:meraki:sc4s - ccx:meraki:sc4s:events - ccx:meraki:sc4s:firewall - ccx:meraki:sc4s:flows - ccx:meraki:sc4s:urls - meraki:accesspoints - meraki:audit - meraki:cameras - meraki:organizationsecurity - meraki:securityappliances - meraki:switches Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Alert, Change, IDS, Malware, Network Traffic, Network Sessions, and Web.

Categories

Created By

Matthew Orme

Type

addon

Downloads

247

Resources

Login to report this app listing