Hello Everyone,
Hello Cisco Community,
Our company provides Cisco Secure Endpoint to different businesses, and we want to combine data from these systems in Splunk for better analysis.
We found an official integration for Splunk here: Splunk Integration. However, it only works with one system at a time. We have 12 different clients, each with their own Cisco Secure Endpoint setup. This means we're dealing with 12 different data sources.
Until September, we used a custom Python script to manage this, but it stopped working properly. Now, it only says, 'No additional records found.'
We need help to find a way to put all 12 data sources into Splunk while keeping the data accurate. Any advice or useful resources would be greatly appreciated.
Thank you for your help and knowledge.
Best regards,
L. Kladny
