Support Cisco FMC fileset
- Dominant language
- Go
- Stars
- 12.7k
- Forks
- 5k
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 364
Description
**Describe the enhancement:**
Cisco firewalls are managed by the Cisco Firepower Management Center (FMC)
Security events such as intrusion events and security intelligence events are logged from the FMC itself instead of the FTD-device, which is already supported in the Cisco Filebeat Module.
The logs from the FMC does not fit the current module, and the entire log ends up in "log.orginal" which is not indexed or searchable.
**Describe a specific use case for the enhancement or feature:**
Being able to index, search, and use Elastic in a more comprehensive way in the SOC. Make visualizations and dashboards to better support the IRT-team when investigating incidents.
Contributor guide
Assessment
This issue has not been assessed yet.