SPL2 modules for Cisco ASA logs

SPL2 content for Cisco ASA currently includes reusable modules for the cisco:asa sourcetype.

SPL2 modules are reusable SPL2 functions generated from add-on knowledge objects such as props.conf and transforms.conf. They can be referenced from SPL2 workflows instead of rewriting sourcetype-specific extraction logic by hand.

Modules are available for the Edge Processor and Ingest Processor. See the following documentation for more information:

• Edge Processor
• Ingest Processor

Modules

For information about available SPL2 modules, see the SPL2 modules overview.

Release notes for SPL2 modules are available in the documentation.