Cisco

Cisco is currently integrated with LogScale through:

  • Cisco Meraki package which provides a parser for Cisco Meraki events such as MX Security Appliances, MR Access Points and MS switches.

  • Cisco Firepower package which provides a parser for Cisco Meraki events such as MX Security Appliances, MR Access Points and MS switches.

  • Cisco ISE Identity Service Engine package which provides a parser for Cisco ISE data such as monitoring access and devices.

  • Cisco (IOS) Internetwork Operating System package which provides a parser to ingest network logs with endpoint data for faster identification of attacks and lateral movement after initial intrusion.

  • Cisco Umbrella package allows you to ingest logs into LogScale to add DNS protection insights to your threat overview for an improved web security posture and contains a parser for Cisco Umbrella DNS resolver logs.

  • Cisco ASA Logs (Preview) package which provides a parser for firewall log events. See the package readme.md for more information.