03-22-2023 09:36 PM
I want to send the log directly from eNcore to elasticsearch.
05-20-2024 07:31 AM
You can use the client from github https://github.com/CiscoSecurity/fp-05-firepower-cli/tree/master
once you install the client you can create an outputter in json or CEF format that will point to your filebeat. filebeat is able to parse json or CEF format. and Then forward those logs to logstash
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community