does firepower support sending logs to RSA

[ybelkassem]

hi ,

does firepower support sending logs to RSA SIEM and what is the format of logs if yes .

Thank you

[Francesco Molino]

Hi

Here is the for RSA security analytics using syslog:
https://community.rsa.com/servlet/JiveServlet/downloadBody/40017-102-6-148078/Sourcefire.pdf

I'm not very familiar with RSA but SF supports eStreamer as well. Can you check if RSA supports it?
This is the way i integrate SF with QRadar for example.
Here Cisco doc for eStreamer:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/api/eStreamer/EventStreamerIntegrationGuide.html