Integrate cisco devices

Elastic Stack Beats
1

Hi All,

I am new to elasticstack. I want to integrate Cisco devices with elasticsearch and kibana for which cisco module under filebeat is available for integration. But filebeat is installed on the host which has to be integrated. But if i want to integrate Cisco routers,switches,firewall etc it's not advisable to add filebeat there. Can someone please help me with the alternative for integrating cisco devices.

2

Hello,

You have to send Cisco logs to a host (a linux server for example) where you installed Filebeat and adapte the module which is by default configured to run via syslog on port 9001 for ASA and port 9002 for IOS

Check doc here > https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-cisco.html

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.