Network Data Sources

Name	Platform	Sourcetype	Source	Supported TA	Date
Cisco Network Visibility Module OSquery	Network	cisco:nvm:osquery:v2	not_applicable	Cisco Security Cloud
Cisco Network Visibility Module Flow Data	Network	cisco:nvm:flowdata:v2	not_applicable	Cisco Security Cloud
Suricata	Network	suricata	not_applicable	CCX Add-on for Suricata
Cisco Secure Firewall Threat Defense Intrusion Event	Network	cisco:sfw:estreamer	not_applicable	Cisco Security Cloud
Cisco Secure Access Firewall	Network	cisco:cloud_security:firewall	cisco_secure_access:firewall	Cisco Secure Access Add-on for Splunk
Cisco Secure Firewall Threat Defense Connection Event	Network	cisco:sfw:estreamer	not_applicable	Cisco Security Cloud
Zeek Conn	Network	bro:conn:json	bro:conn:json	TA for Zeek
Cisco Secure Firewall Threat Defense File Event	Network	cisco:sfw:estreamer	not_applicable	Cisco Security Cloud
Palo Alto Network Traffic	Network	pan:traffic	not_applicable	Palo Alto Networks Add-on
Bro dns	Network	bro:dns:json	bro:dns:json	TA for Zeek
Palo Alto Network Threat	Network	pan:threat	not_applicable	Palo Alto Networks Add-on
Cisco SD-WAN Service Proxy Access Logs	Network	cisco:sdwan:access	/var/log/nms/containers/service-proxy/serviceproxy-access.log	N/A
Cisco Secure Access Proxy	Network	cisco:cloud_security:proxy	cisco_cloud_security_addon	Cisco Secure Access Add-on for Splunk
Cisco Secure Access DNS	Network	cisco:cloud_security:dns	not_applicable	Cisco Secure Access Add-on for Splunk