Installation and configuration overview for the Splunk Add-on for Cisco ESA¶ Complete the following steps to install and configure this add-on. Install the Splunk Add-on for Cisco ESA. Configure your Cisco ESA server to place the logs on a Splunk Enterprise forwarder or single instance. Configure monitor inputs.